[{"data":1,"prerenderedAt":4250},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-11432":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":231,"related":234},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-10-01T04:34:15.142Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-10-01T04:32:18.676Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},44,43,1,24,4,27,41,39,38,0,4135,4124,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":38,"topPackage":71},2467,50,7265,9,55,2433,34,852,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5454545454545454,"repository",{"id":78,"slug":79,"gitlabProjectId":80,"name":81,"pathWithNamespace":82,"description":83,"webUrl":84,"commitSha":85,"commitUrl":86,"lastActivityAt":87,"headCommittedAt":88,"tree":89,"files":92,"resolvedComponentCount":100,"artifactResolvedComponentCount":100,"exactManifestPinCount":39,"packageCount":100,"ecosystems":101,"aiPackageCount":103,"licenseExpressionCount":104,"unknownLicensePackageCount":32,"advisoryIds":105,"advisoryCount":229,"providers":230},"opencode:11432","opencode-11432",11432,"URBAN.KI Sovia-app","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app",null,"https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app","2351f6930f4d7a1c812f6c7d6e4b71bf88de6041","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app\u002F-\u002Fcommit\u002F2351f6930f4d7a1c812f6c7d6e4b71bf88de6041","2026-09-15T13:12:13.158Z","2026-09-14T08:20:02.000Z",{"complete":90,"entryCount":91,"truncated":47},true,57,[93],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},"uv-lock","23045eafdfb483ec149e375bcdcde05eebbacd50","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-sovia-app\u002F-\u002Fblob\u002F2351f6930f4d7a1c812f6c7d6e4b71bf88de6041\u002Fuv.lock","b74bb096d47b3a37759845db494e848a6612ed5aae81025097905744d143687b",194138,"parsed",75,[102],"pypi",2,12,[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228],"GHSA-239g-whfq-7xj9","GHSA-248v-346w-9cwc","GHSA-284h-m62q-gf8w","GHSA-2f96-g7mh-g2hx","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-38jv-5279-wg99","GHSA-3f7w-8rr8-f37f","GHSA-3hv7-mjh2-fv65","GHSA-3rp5-jjmw-4wv2","GHSA-3wxw-xv34-2frg","GHSA-3x9g-8vmp-wqvf","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4gmw-gg2m-w46p","GHSA-4x4j-2g7c-83w6","GHSA-539m-9xh6-q6rr","GHSA-53q9-r3pm-6pq6","GHSA-59cr-6r3x-644w","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-5xxx-qhh7-9287","GHSA-62p4-gmf7-7g93","GHSA-65pc-fj4g-8rjx","GHSA-6p8h-3wgx-97gf","GHSA-6r8x-57c9-28j4","GHSA-7545-fcxq-7j24","GHSA-7833-fr7j-v32q","GHSA-78cv-mqj4-43f7","GHSA-7cx3-6m66-7c5m","GHSA-7gcm-g887-7qv7","GHSA-7p48-42j8-8846","GHSA-82r6-8w77-94w6","GHSA-8423-8fgw-73vq","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8mcc-hrx5-hvxc","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-94p4-4cq8-9g67","GHSA-956x-8gvw-wg5v","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9rj7-rf2p-w77r","GHSA-9wx4-h78v-vm56","GHSA-c2m8-h5v5-343r","GHSA-c678-jfcj-6jmf","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-chx6-46f5-w4vp","GHSA-cpwx-vrp4-4pq7","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fj7v-r99m-22gq","GHSA-fjr4-x663-mwxc","GHSA-g5vv-9gxw-82hx","GHSA-gc5v-m9x4-r6x2","GHSA-gh4c-6fx4-qh6g","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hh9p-6wh2-4mfc","GHSA-hmq2-w58f-27jc","GHSA-jhmp-mqwm-3gq8","GHSA-jjj6-mw9f-p565","GHSA-jm78-9fvv-mhgr","GHSA-mf9v-mfxr-j63j","GHSA-mgf9-4vpg-hj56","GHSA-mpf4-983q-p7j4","GHSA-mv93-w799-cj2w","GHSA-p538-c434-8v24","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-r73j-pqj5-w3x7","GHSA-r9mr-m37c-5fr3","GHSA-rgxp-2hwp-jwgg","GHSA-rpm5-65cw-6hj4","GHSA-rrmf-rvhw-rf47","GHSA-rwj8-pgh3-r573","GHSA-v87r-6q3f-2j67","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vqwp-45wm-r9r5","GHSA-vxq7-64xx-v4gw","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wvpp-8hx9-p66j","GHSA-wwv5-g3v4-889x","GHSA-x2qx-6953-8485","GHSA-x3gm-94wq-g975","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-112","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-2286",123,[],{"files":232,"occurrenceCount":100},[233],{"path":56,"kind":94,"blobSha":95,"sourceUrl":96,"commitSha":85,"contentSha256":97,"byteCount":98,"state":99,"componentCount":100},{"packages":235,"vulnerabilities":924},[236,247,257,267,279,289,300,310,320,329,338,348,357,366,376,385,394,403,412,421,430,439,448,457,466,475,484,493,502,511,520,529,538,547,556,565,574,583,592,602,611,620,629,637,646,655,664,673,682,691,700,709,717,726,734,744,753,762,771,780,789,798,807,816,825,835,844,853,862,871,880,889,899,907,916],{"id":237,"slug":238,"identity":239,"label":240,"aiRelevant":90,"provider":83,"advisoryCount":241,"licenseExpressions":242,"versions":244,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":246},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[243],"BSD-3-Clause",[245],"2.9.0",[56],{"id":248,"slug":249,"identity":250,"label":251,"aiRelevant":90,"provider":83,"advisoryCount":39,"licenseExpressions":252,"versions":254,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":256},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[253],"Apache-2.0",[255],"4.12.0.88",[56],{"id":258,"slug":259,"identity":260,"label":261,"aiRelevant":47,"provider":83,"advisoryCount":262,"licenseExpressions":263,"versions":264,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":266},"package:pypi:gitpython","gitpython-dcd13009","pypi:gitpython","gitpython",30,[243],[265],"3.1.45",[56],{"id":268,"slug":269,"identity":270,"label":271,"aiRelevant":47,"provider":83,"advisoryCount":272,"licenseExpressions":273,"versions":276,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":278},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[274,275],"HPND","MIT-CMU",[277],"12.0.0",[56],{"id":280,"slug":281,"identity":282,"label":283,"aiRelevant":47,"provider":83,"advisoryCount":284,"licenseExpressions":285,"versions":286,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":288},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",16,[253],[287],"6.5.2",[56],{"id":290,"slug":291,"identity":292,"label":293,"aiRelevant":47,"provider":83,"advisoryCount":294,"licenseExpressions":295,"versions":297,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":299},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[296],"MIT",[298],"2.5.0",[56],{"id":301,"slug":302,"identity":303,"label":304,"aiRelevant":47,"provider":83,"advisoryCount":34,"licenseExpressions":305,"versions":307,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":309},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[243,306],"non-standard",[308],"3.1.6",[56],{"id":311,"slug":312,"identity":313,"label":314,"aiRelevant":47,"provider":83,"advisoryCount":315,"licenseExpressions":316,"versions":317,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":319},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[253],[318],"2.32.5",[56],{"id":321,"slug":322,"identity":323,"label":324,"aiRelevant":47,"provider":83,"advisoryCount":315,"licenseExpressions":325,"versions":326,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":328},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[296],[327],"80.9.0",[56],{"id":330,"slug":331,"identity":332,"label":333,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":334,"versions":335,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":337},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[296],[336],"4.11.0",[56],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":343,"versions":345,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":347},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[296,344],"Unlicense",[346],"3.20.0",[56],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":353,"versions":354,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":356},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[243],[355],"6.33.0",[56],{"id":358,"slug":359,"identity":360,"label":361,"aiRelevant":47,"provider":83,"advisoryCount":103,"licenseExpressions":362,"versions":363,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":365},"package:pypi:streamlit","streamlit-b61aa01e","pypi:streamlit","streamlit",[253],[364],"1.51.0",[56],{"id":367,"slug":368,"identity":369,"label":370,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":371,"versions":373,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":375},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[372],"MPL-2.0",[374],"2025.10.5",[56],{"id":377,"slug":378,"identity":379,"label":380,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":381,"versions":382,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":384},"package:pypi:click","click-ef97f731","pypi:click","click",[243,306],[383],"8.3.0",[56],{"id":386,"slug":387,"identity":388,"label":389,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":390,"versions":391,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":393},"package:pypi:duckdb","duckdb-8c0332c9","pypi:duckdb","duckdb",[296],[392],"1.4.1",[56],{"id":395,"slug":396,"identity":397,"label":398,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":399,"versions":400,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":402},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[296],[401],"0.16.0",[56],{"id":404,"slug":405,"identity":406,"label":407,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":408,"versions":409,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":411},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[243,306],[410],"3.11",[56],{"id":413,"slug":414,"identity":415,"label":416,"aiRelevant":47,"provider":83,"advisoryCount":32,"licenseExpressions":417,"versions":418,"dossier":90,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":420},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[253,306],[419],"21.0.0",[56],{"id":422,"slug":423,"identity":424,"label":425,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":426,"versions":427,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":429},"package:pypi:altair","altair-01b7f976","pypi:altair","altair",[306],[428],"5.5.0",[56],{"id":431,"slug":432,"identity":433,"label":434,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":435,"versions":436,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":438},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[296],[437],"25.4.0",[56],{"id":440,"slug":441,"identity":442,"label":443,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":444,"versions":445,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":447},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[296],[446],"1.9.0",[56],{"id":449,"slug":450,"identity":451,"label":452,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":453,"versions":454,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":456},"package:pypi:branca","branca-e1a3550c","pypi:branca","branca",[296],[455],"0.8.2",[56],{"id":458,"slug":459,"identity":460,"label":461,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":462,"versions":463,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":465},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[296],[464],"6.2.1",[56],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":471,"versions":472,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":474},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[296],[473],"3.4.4",[56],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":480,"versions":481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":483},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[306],[482],"0.4.6",[56],{"id":485,"slug":486,"identity":487,"label":488,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":489,"versions":490,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":492},"package:pypi:filepath","filepath-6e8545d1","pypi:filepath","filepath",[296],[491],"0.1",[56],{"id":494,"slug":495,"identity":496,"label":497,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":498,"versions":499,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":501},"package:pypi:folium","folium-6e89a148","pypi:folium","folium",[296],[500],"0.20.0",[56],{"id":503,"slug":504,"identity":505,"label":506,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":507,"versions":508,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":510},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[243,306],[509],"2025.10.0",[56],{"id":512,"slug":513,"identity":514,"label":515,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":516,"versions":517,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":519},"package:pypi:gitdb","gitdb-dac4580b","pypi:gitdb","gitdb",[306],[518],"4.0.12",[56],{"id":521,"slug":522,"identity":523,"label":524,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":525,"versions":526,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":528},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[243],[527],"1.0.9",[56],{"id":530,"slug":531,"identity":532,"label":533,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":534,"versions":535,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":537},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[243],[536],"0.28.1",[56],{"id":539,"slug":540,"identity":541,"label":542,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":543,"versions":544,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":546},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[296],[545],"4.25.1",[56],{"id":548,"slug":549,"identity":550,"label":551,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":552,"versions":553,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":555},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[296],[554],"2025.9.1",[56],{"id":557,"slug":558,"identity":559,"label":560,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":561,"versions":562,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":564},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[243,306],[563],"3.0.3",[56],{"id":566,"slug":567,"identity":568,"label":569,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":570,"versions":571,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":573},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[306],[572],"1.3.0",[56],{"id":575,"slug":576,"identity":577,"label":578,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":579,"versions":580,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":582},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[296,306],[581],"2.11.0",[56],{"id":584,"slug":585,"identity":586,"label":587,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":588,"versions":589,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":591},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[243,306],[590],"3.5",[56],{"id":593,"slug":594,"identity":595,"label":596,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":597,"versions":599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":601},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[598,306],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[600],"2.2.6",[56],{"id":603,"slug":604,"identity":605,"label":606,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":607,"versions":608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":610},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[306],[609],"12.8.4.1",[56],{"id":612,"slug":613,"identity":614,"label":615,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":616,"versions":617,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":619},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[306],[618],"12.8.90",[56],{"id":621,"slug":622,"identity":623,"label":624,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":625,"versions":626,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":628},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[306],[627],"12.8.93",[56],{"id":630,"slug":631,"identity":632,"label":633,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":634,"versions":635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":636},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[306],[618],[56],{"id":638,"slug":639,"identity":640,"label":641,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":642,"versions":643,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":645},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[306],[644],"9.10.2.21",[56],{"id":647,"slug":648,"identity":649,"label":650,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":651,"versions":652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":654},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[306],[653],"11.3.3.83",[56],{"id":656,"slug":657,"identity":658,"label":659,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":660,"versions":661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":663},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[306],[662],"1.13.1.3",[56],{"id":665,"slug":666,"identity":667,"label":668,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":669,"versions":670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":672},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[306],[671],"10.3.9.90",[56],{"id":674,"slug":675,"identity":676,"label":677,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":678,"versions":679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":681},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[306],[680],"11.7.3.90",[56],{"id":683,"slug":684,"identity":685,"label":686,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":687,"versions":688,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":690},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[306],[689],"12.5.8.93",[56],{"id":692,"slug":693,"identity":694,"label":695,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":696,"versions":697,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":699},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[306],[698],"0.7.1",[56],{"id":701,"slug":702,"identity":703,"label":704,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":705,"versions":706,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":708},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[243,306],[707],"2.27.5",[56],{"id":710,"slug":711,"identity":712,"label":713,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":714,"versions":715,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":716},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[306],[627],[56],{"id":718,"slug":719,"identity":720,"label":721,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":722,"versions":723,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":725},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[243,306],[724],"3.3.20",[56],{"id":727,"slug":728,"identity":729,"label":730,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":731,"versions":732,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":733},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[253,306],[618],[56],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":739,"versions":741,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":743},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[740,306],"Apache-2.0 OR BSD-2-Clause",[742],"25.0",[56],{"id":745,"slug":746,"identity":747,"label":748,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":749,"versions":750,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":752},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[306],[751],"2.3.3",[56],{"id":754,"slug":755,"identity":756,"label":757,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":758,"versions":759,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":761},"package:pypi:pydeck","pydeck-75380c92","pypi:pydeck","pydeck",[253],[760],"0.9.1",[56],{"id":763,"slug":764,"identity":765,"label":766,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":767,"versions":768,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":770},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[306],[769],"2.9.0.post0",[56],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":776,"versions":777,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":779},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[296],[778],"2025.2",[56],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":785,"versions":786,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":788},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[296],[787],"0.37.0",[56],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":794,"versions":795,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":797},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[296],[796],"0.28.0",[56],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":803,"versions":804,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":806},"package:pypi:shapely","shapely-1cd2f2ba","pypi:shapely","shapely",[243],[805],"2.1.2",[56],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":812,"versions":813,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":815},"package:pypi:six","six-3c3888bd","pypi:six","six",[296],[814],"1.17.0",[56],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":821,"versions":822,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":824},"package:pypi:smmap","smmap-943fc5aa","pypi:smmap","smmap",[243],[823],"5.0.2",[56],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":830,"versions":832,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":834},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[831],"Apache-2.0 OR MIT",[833],"1.3.1",[56],{"id":836,"slug":837,"identity":838,"label":839,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":840,"versions":841,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":843},"package:pypi:streamlit-folium","streamlit-folium-e76fb4ea","pypi:streamlit-folium","streamlit-folium",[],[842],"0.25.3",[56],{"id":845,"slug":846,"identity":847,"label":848,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":849,"versions":850,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":852},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[306],[851],"1.14.0",[56],{"id":854,"slug":855,"identity":856,"label":857,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":858,"versions":859,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":861},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[253],[860],"9.1.2",[56],{"id":863,"slug":864,"identity":865,"label":866,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":867,"versions":868,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":870},"package:pypi:toml","toml-490ac3c8","pypi:toml","toml",[296],[869],"0.10.2",[56],{"id":872,"slug":873,"identity":874,"label":875,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":876,"versions":877,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":879},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[306],[878],"0.24.0",[56],{"id":881,"slug":882,"identity":883,"label":884,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":885,"versions":886,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":888},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[296],[887],"3.5.0",[56],{"id":890,"slug":891,"identity":892,"label":893,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":894,"versions":896,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":898},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[895,306],"PSF-2.0",[897],"4.15.0",[56],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":904,"versions":905,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":906},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[253],[778],[56],{"id":908,"slug":909,"identity":910,"label":911,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":912,"versions":913,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":915},"package:pypi:watchdog","watchdog-55ddb444","pypi:watchdog","watchdog",[253],[914],"6.0.0",[56],{"id":917,"slug":918,"identity":919,"label":920,"aiRelevant":47,"provider":83,"advisoryCount":39,"licenseExpressions":921,"versions":922,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":923},"package:pypi:xyzservices","xyzservices-a1955a18","pypi:xyzservices","xyzservices",[243],[509],[56],[925,967,1002,1029,1060,1095,1138,1165,1192,1223,1248,1278,1301,1337,1364,1393,1422,1446,1470,1492,1523,1559,1582,1605,1628,1658,1686,1712,1738,1761,1793,1823,1848,1889,1918,1939,1962,2001,2030,2062,2094,2117,2144,2172,2206,2232,2259,2289,2310,2342,2366,2421,2445,2477,2501,2532,2566,2594,2617,2642,2670,2691,2714,2742,2776,2809,2836,2868,2890,2917,2941,2962,2983,3008,3029,3056,3083,3107,3131,3156,3172,3199,3225,3245,3282,3309,3341,3369,3392,3422,3442,3476,3506,3526,3554,3581,3608,3651,3671,3701,3753,3776,3803,3827,3850,3882,3909,3934,3956,3976,3993,4012,4029,4050,4066,4081,4098,4113,4130,4147,4164,4187,4220],{"id":106,"slug":926,"dossier":47,"summary":927,"aliases":928,"sourceIds":931,"published":932,"modified":933,"checkedAt":7,"severity":934,"references":941,"versionKeys":962,"packageCount":32,"repositoryCount":966},"ghsa-239g-whfq-7xj9-ede3fcd6","GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution",[929,930],"CVE-2026-87817","PYSEC-2026-3982",[106,930],"2026-09-09T12:17:16.830Z","2026-09-30T23:45:04.022111787Z",[935,938],{"type":936,"score":937},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":939,"score":940},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[942,945,948,951,953,956,958,960],{"type":943,"url":944},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-239g-whfq-7xj9",{"type":946,"url":947},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-87817",{"type":949,"url":950},"WEB","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2218",{"type":949,"url":952},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fc7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b",{"type":954,"url":955},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython",{"type":949,"url":957},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.60",{"type":949,"url":959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3982.yaml",{"type":946,"url":961},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation",[963,964,965],"pypi:gitpython@3.1.44","pypi:gitpython@3.1.45","pypi:gitpython@3.1.46",6,{"id":107,"slug":968,"dossier":47,"summary":969,"aliases":970,"sourceIds":973,"published":974,"modified":975,"checkedAt":7,"severity":976,"references":979,"versionKeys":1000,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[971,972],"CVE-2024-39689","PYSEC-2024-230",[107,972],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[977],{"type":936,"score":978},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[980,982,984,987,989,991,994,996,998],{"type":946,"url":981},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":946,"url":983},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":985,"url":986},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":954,"url":988},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":949,"url":990},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":992,"url":993},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":949,"url":995},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":946,"url":997},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":946,"url":999},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1001],"pypi:certifi@2024.6.2",{"id":108,"slug":1003,"dossier":47,"summary":1004,"aliases":1005,"sourceIds":1008,"published":1009,"modified":1010,"checkedAt":7,"severity":1011,"references":1018,"versionKeys":1028,"packageCount":32,"repositoryCount":966},"ghsa-284h-m62q-gf8w-da9acb0c","GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE",[1006,1007],"CVE-2026-78676","PYSEC-2026-3786",[108,1007],"2026-08-25T02:16:52.030Z","2026-09-08T19:00:06.885837775Z",[1012,1014,1016],{"type":936,"score":1013},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":939,"score":1015},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":939,"score":1017},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1019,1021,1023,1024,1026],{"type":943,"url":1020},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-284h-m62q-gf8w",{"type":946,"url":1022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78676",{"type":954,"url":955},{"type":949,"url":1025},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3786.yaml",{"type":946,"url":1027},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-config-injection",[963,964,965],{"id":109,"slug":1030,"dossier":47,"summary":1031,"aliases":1032,"sourceIds":1035,"published":1036,"modified":1037,"checkedAt":7,"severity":1038,"references":1041,"versionKeys":1059,"packageCount":32,"repositoryCount":966},"ghsa-2f96-g7mh-g2hx-dd7ec02d","GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist",[1033,1034],"CVE-2026-67325","PYSEC-2026-3836",[109,1034],"2026-07-21T19:43:43Z","2026-09-23T05:15:05.950374846Z",[1039],{"type":936,"score":1040},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1042,1044,1046,1048,1050,1051,1053,1055,1057],{"type":949,"url":1043},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",{"type":946,"url":1045},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67325",{"type":949,"url":1047},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2161",{"type":949,"url":1049},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F56806080c1348749b07daa4a2024ce47b3cad285",{"type":954,"url":955},{"type":949,"url":1052},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.51",{"type":949,"url":1054},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-option-prefix-abbreviation",{"type":954,"url":1056},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fgitpython",{"type":946,"url":1058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2f96-g7mh-g2hx",[963,964,965],{"id":110,"slug":1061,"dossier":90,"summary":1062,"aliases":1063,"sourceIds":1066,"published":1067,"modified":1068,"checkedAt":7,"severity":1069,"references":1072,"versionKeys":1089,"packageCount":32,"repositoryCount":284},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1064,1065],"CVE-2025-66471","PYSEC-2026-1994",[110,1065],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[1070],{"type":939,"score":1071},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1073,1075,1077,1079,1081,1083,1085,1087],{"type":949,"url":1074},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":946,"url":1076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":985,"url":1078},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":949,"url":1080},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":946,"url":1082},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":949,"url":1084},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":954,"url":1086},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":954,"url":1088},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[1090,1091,1092,1093,1094],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":111,"slug":1096,"dossier":47,"summary":1097,"aliases":1098,"sourceIds":1102,"published":1103,"modified":1104,"checkedAt":7,"severity":1105,"references":1112,"versionKeys":1134,"packageCount":32,"repositoryCount":315},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1099,1100,1101],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[111,1101],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[1106,1108,1110],{"type":936,"score":1107},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":939,"score":1109},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":936,"score":1111},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1113,1115,1118,1120,1122,1124,1126,1128,1130,1132],{"type":946,"url":1114},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1116,"url":1117},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1116,"url":1119},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":949,"url":1121},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":954,"url":1123},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":949,"url":1125},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1116,"url":1127},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":946,"url":1129},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":946,"url":1131},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":946,"url":1133},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1135,1136,1137],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":112,"slug":1139,"dossier":47,"summary":1140,"aliases":1141,"sourceIds":1144,"published":1145,"modified":1146,"checkedAt":7,"severity":1147,"references":1151,"versionKeys":1164,"packageCount":32,"repositoryCount":284},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1142,1143],"CVE-2026-21441","PYSEC-2026-1996",[112,1143],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[1148,1150],{"type":936,"score":1149},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":939,"score":1071},[1152,1154,1156,1158,1159,1161,1162],{"type":949,"url":1153},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":946,"url":1155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":985,"url":1157},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":954,"url":1086},{"type":949,"url":1160},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":954,"url":1088},{"type":946,"url":1163},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1090,1091,1092,1093,1094],{"id":113,"slug":1166,"dossier":47,"summary":1167,"aliases":1168,"sourceIds":1171,"published":1172,"modified":1173,"checkedAt":7,"severity":1174,"references":1179,"versionKeys":1191,"packageCount":32,"repositoryCount":966},"ghsa-3f7w-8rr8-f37f-9cab61a6","GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read",[1169,1170],"CVE-2026-73620","PYSEC-2026-3949",[113,1170],"2026-08-03T20:09:56Z","2026-09-10T13:10:44.075529324Z",[1175,1177],{"type":936,"score":1176},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":939,"score":1178},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1180,1182,1184,1186,1187,1189],{"type":943,"url":1181},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3f7w-8rr8-f37f",{"type":949,"url":1183},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2193",{"type":949,"url":1185},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F3af0c2516c5e18c829da30338614688f6b69b49c",{"type":954,"url":955},{"type":949,"url":1188},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.57",{"type":946,"url":1190},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-and-read",[963,964,965],{"id":114,"slug":1193,"dossier":47,"summary":1194,"aliases":1195,"sourceIds":1196,"published":1197,"modified":1198,"checkedAt":7,"severity":1199,"references":1202,"versionKeys":1215,"packageCount":32,"repositoryCount":42},"ghsa-3hv7-mjh2-fv65-5be6c7b0","Tornado: Unbounded query-string argument count allows event-loop-stalling DoS",[],[114],"2026-09-30T23:49:25Z","2026-10-01T00:00:04.690479804Z",[1200],{"type":936,"score":1201},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1203,1205,1207,1209,1211,1213],{"type":949,"url":1204},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3hv7-mjh2-fv65",{"type":949,"url":1206},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3719",{"type":949,"url":1208},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F03945136ea9746eccf61caf88edae39642e59c93",{"type":949,"url":1210},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8a61dd6005f42733015160f3c23a2bcffe200542",{"type":954,"url":1212},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":949,"url":1214},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.9",[1216,1217,1218,1219,1220,1221,1222],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5","pypi:tornado@6.5.7","pypi:tornado@6.5.8",{"id":115,"slug":1224,"dossier":47,"summary":1225,"aliases":1226,"sourceIds":1229,"published":1230,"modified":1231,"checkedAt":7,"severity":1232,"references":1237,"versionKeys":1247,"packageCount":32,"repositoryCount":966},"ghsa-3rp5-jjmw-4wv2-6d7352e6","GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)",[1227,1228],"CVE-2026-69097","PYSEC-2026-3981",[115,1228],"2026-07-24T16:22:02Z","2026-09-17T09:10:35.253135365Z",[1233,1235],{"type":936,"score":1234},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":936,"score":1236},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1238,1240,1242,1243,1245],{"type":943,"url":1239},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3rp5-jjmw-4wv2",{"type":949,"url":1241},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed1b924f4e2d2ee7bab296df77b978af21853f1",{"type":954,"url":955},{"type":949,"url":1244},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.53",{"type":946,"url":1246},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-submodule-names",[963,964,965],{"id":116,"slug":1249,"dossier":47,"summary":1250,"aliases":1251,"sourceIds":1254,"published":1255,"modified":1256,"checkedAt":7,"severity":1257,"references":1260,"versionKeys":1277,"packageCount":32,"repositoryCount":966},"ghsa-3wxw-xv34-2frg-c013ae2d","GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)",[1252,1253],"CVE-2026-78679","PYSEC-2026-3837",[116,1253],"2026-09-08T19:42:22Z","2026-09-23T05:15:05.925079070Z",[1258],{"type":936,"score":1259},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1261,1263,1265,1267,1269,1270,1272,1274,1275],{"type":949,"url":1262},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",{"type":946,"url":1264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78679",{"type":949,"url":1266},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2208",{"type":949,"url":1268},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1b0d2d9b91575f7db44ef4ff58ac37fc9335e5f6",{"type":954,"url":955},{"type":949,"url":1271},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.59",{"type":949,"url":1273},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-tagreference-create",{"type":954,"url":1056},{"type":946,"url":1276},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3wxw-xv34-2frg",[963,964,965],{"id":117,"slug":1279,"dossier":47,"summary":1280,"aliases":1281,"sourceIds":1284,"published":1285,"modified":1286,"checkedAt":7,"severity":1287,"references":1290,"versionKeys":1300,"packageCount":32,"repositoryCount":66},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[1282,1283],"CVE-2026-49853","PYSEC-2026-3387",[117,1283],"2026-06-15T20:20:00Z","2026-09-10T03:50:55.306087854Z",[1288],{"type":936,"score":1289},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[1291,1293,1294,1296,1298],{"type":949,"url":1292},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":954,"url":1212},{"type":954,"url":1295},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":946,"url":1297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":946,"url":1299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[1216,1217,1218,1219,1220],{"id":118,"slug":1302,"dossier":90,"summary":1303,"aliases":1304,"sourceIds":1308,"published":1309,"modified":1310,"checkedAt":7,"severity":1311,"references":1313,"versionKeys":1326,"packageCount":32,"repositoryCount":1336},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1305,1306,1307],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[118,1307],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[1312],{"type":936,"score":1149},[1314,1316,1318,1320,1322,1324],{"type":943,"url":1315},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":946,"url":1317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":985,"url":1319},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":949,"url":1321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":954,"url":1323},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":946,"url":1325},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1327,1328,1329,1330,1331,1332,1333,1334,1335],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0",17,{"id":119,"slug":1338,"dossier":47,"summary":1339,"aliases":1340,"sourceIds":1343,"published":1344,"modified":1345,"checkedAt":7,"severity":1346,"references":1349,"versionKeys":1362,"packageCount":32,"repositoryCount":1363},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1341,1342],"CVE-2025-50182","PYSEC-2026-1997",[119,1342],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[1347],{"type":936,"score":1348},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1350,1352,1354,1356,1357,1359,1360],{"type":949,"url":1351},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":946,"url":1353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":985,"url":1355},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":954,"url":1086},{"type":949,"url":1358},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":954,"url":1088},{"type":946,"url":1361},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1090,1091,1092,1093],8,{"id":120,"slug":1365,"dossier":47,"summary":1366,"aliases":1367,"sourceIds":1370,"published":1371,"modified":1372,"checkedAt":7,"severity":1373,"references":1375,"versionKeys":1392,"packageCount":32,"repositoryCount":966},"ghsa-4gmw-gg2m-w46p-58f27cb8","GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree\u002Freset\u002Fmerge_tree enables arbitrary file overwrite",[1368,1369],"CVE-2026-76219","PYSEC-2026-3838",[120,1369],"2026-08-07T15:33:57Z","2026-09-10T12:25:42.767166279Z",[1374],{"type":936,"score":1176},[1376,1378,1380,1382,1384,1385,1387,1389,1390],{"type":949,"url":1377},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",{"type":946,"url":1379},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76219",{"type":949,"url":1381},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2204",{"type":949,"url":1383},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F9b5dcaf85da5946dbf69dcd53f9edba08f760b32",{"type":954,"url":955},{"type":949,"url":1386},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.58",{"type":949,"url":1388},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-read-tree",{"type":954,"url":1056},{"type":946,"url":1391},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4gmw-gg2m-w46p",[963,964,965],{"id":121,"slug":1394,"dossier":90,"summary":1395,"aliases":1396,"sourceIds":1400,"published":1401,"modified":1402,"checkedAt":7,"severity":1403,"references":1406,"versionKeys":1421,"packageCount":32,"repositoryCount":1336},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1397,1398,1399],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[121,1399],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[1404],{"type":936,"score":1405},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1407,1409,1411,1413,1415,1417,1419,1420],{"type":943,"url":1408},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":946,"url":1410},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":985,"url":1412},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":985,"url":1414},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":985,"url":1416},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":949,"url":1418},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":954,"url":1323},{"type":946,"url":1325},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":122,"slug":1423,"dossier":47,"summary":1424,"aliases":1425,"sourceIds":1428,"published":1429,"modified":1430,"checkedAt":7,"severity":1431,"references":1435,"versionKeys":1445,"packageCount":32,"repositoryCount":966},"ghsa-539m-9xh6-q6rr-c4575e3c","GitPython: Incomplete unsafe_git_archive_options denylist omits --add-file \u002F --add-virtual-file, enabling arbitrary file read via Repo.archive()",[1426,1427],"CVE-2026-73619","PYSEC-2026-3948",[122,1427],"2026-08-03T20:14:28Z","2026-09-10T13:11:01.695990206Z",[1432,1433],{"type":936,"score":1259},{"type":939,"score":1434},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[1436,1438,1439,1441,1442,1443],{"type":943,"url":1437},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-539m-9xh6-q6rr",{"type":949,"url":1183},{"type":949,"url":1440},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F7a4f5dcb7bf3cbcbf6e438017efcdfe0bc0d36ca",{"type":954,"url":955},{"type":949,"url":1188},{"type":946,"url":1444},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-archive",[963,964,965],{"id":123,"slug":1447,"dossier":47,"summary":1448,"aliases":1449,"sourceIds":1453,"published":1454,"modified":1455,"checkedAt":7,"severity":1456,"references":1459,"versionKeys":1469,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[1450,1451,1452],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[123,1452],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[1457,1458],{"type":939,"score":1015},{"type":936,"score":1013},[1460,1462,1464,1466,1468],{"type":946,"url":1461},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":946,"url":1463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":949,"url":1465},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":949,"url":1467},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":954,"url":1123},[1135],{"id":124,"slug":1471,"dossier":47,"summary":1472,"aliases":1473,"sourceIds":1475,"published":1476,"modified":1477,"checkedAt":7,"severity":1478,"references":1481,"versionKeys":1491,"packageCount":32,"repositoryCount":966},"ghsa-59cr-6r3x-644w-a8ec12fb","GitPython submodule update path traversal can write outside the repository",[1474],"CVE-2026-100689",[124],"2026-09-30T23:47:12Z","2026-10-01T00:00:05.754996881Z",[1479],{"type":939,"score":1480},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1482,1484,1486,1488,1489],{"type":949,"url":1483},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-59cr-6r3x-644w",{"type":949,"url":1485},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2225",{"type":949,"url":1487},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1ed0ebc2f2e74d979cdc367a4864a7731fdcc093",{"type":954,"url":955},{"type":949,"url":1490},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.62",[963,964,965],{"id":125,"slug":1493,"dossier":47,"summary":1494,"aliases":1495,"sourceIds":1497,"published":1498,"modified":1499,"checkedAt":7,"severity":1500,"references":1503,"versionKeys":1514,"packageCount":32,"repositoryCount":284},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[1496],"CVE-2026-64847",[125],"2026-09-18T17:17:10Z","2026-09-18T17:30:07.278440290Z",[1501],{"type":939,"score":1502},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1504,1506,1508,1510,1512],{"type":949,"url":1505},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":949,"url":1507},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":949,"url":1509},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":954,"url":1511},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":949,"url":1513},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",[1515,1516,1517,1518,1519,1520,1521,1522],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":126,"slug":1524,"dossier":47,"summary":1525,"aliases":1526,"sourceIds":1530,"published":1531,"modified":1532,"checkedAt":7,"severity":1533,"references":1537,"versionKeys":1554,"packageCount":32,"repositoryCount":34},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1527,1528,1529],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[126,1529],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[1534,1536],{"type":939,"score":1535},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":936,"score":1040},[1538,1540,1542,1544,1546,1548,1550,1552],{"type":943,"url":1539},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":946,"url":1541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1116,"url":1543},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":985,"url":1545},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":949,"url":1547},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":954,"url":1549},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":949,"url":1551},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":992,"url":1553},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1555,1556,1557,1558],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":127,"slug":1560,"dossier":90,"summary":1561,"aliases":1562,"sourceIds":1566,"published":1567,"modified":1568,"checkedAt":7,"severity":1569,"references":1571,"versionKeys":1581,"packageCount":32,"repositoryCount":1336},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1563,1564,1565],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[127,1565],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[1570],{"type":936,"score":1149},[1572,1574,1576,1577,1579,1580],{"type":943,"url":1573},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":946,"url":1575},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":985,"url":1319},{"type":949,"url":1578},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":954,"url":1323},{"type":946,"url":1325},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":128,"slug":1583,"dossier":47,"summary":1584,"aliases":1585,"sourceIds":1589,"published":1590,"modified":1591,"checkedAt":7,"severity":1592,"references":1596,"versionKeys":1604,"packageCount":32,"repositoryCount":104},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1586,1587,1588],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[128,1588],"2026-05-04T20:18:27Z","2026-09-10T03:51:04.701007027Z",[1593,1594],{"type":936,"score":1111},{"type":939,"score":1595},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1597,1599,1601,1602],{"type":946,"url":1598},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":946,"url":1600},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":954,"url":1323},{"type":946,"url":1603},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1330,1331,1332,1333,1334],{"id":129,"slug":1606,"dossier":47,"summary":1607,"aliases":1608,"sourceIds":1611,"published":1612,"modified":1613,"checkedAt":7,"severity":1614,"references":1617,"versionKeys":1627,"packageCount":32,"repositoryCount":966},"ghsa-5xxx-qhh7-9287-87d91b3e","GitPython: Incomplete unsafe_git_revision_options denylist omits --contents\u002F-S, enabling arbitrary file read via Repo.blame()",[1609,1610],"CVE-2026-78678","PYSEC-2026-3788",[129,1610],"2026-08-25T02:16:52.313Z","2026-09-08T19:00:06.904435463Z",[1615,1616],{"type":936,"score":1259},{"type":939,"score":1434},[1618,1620,1622,1623,1625],{"type":943,"url":1619},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-5xxx-qhh7-9287",{"type":946,"url":1621},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78678",{"type":954,"url":955},{"type":949,"url":1624},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3788.yaml",{"type":946,"url":1626},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-repo-blame",[963,964,965],{"id":130,"slug":1629,"dossier":90,"summary":1630,"aliases":1631,"sourceIds":1635,"published":1636,"modified":1637,"checkedAt":7,"severity":1638,"references":1641,"versionKeys":1657,"packageCount":32,"repositoryCount":1336},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1632,1633,1634],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[130,1634],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[1639],{"type":939,"score":1640},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1642,1644,1646,1648,1650,1651,1653,1655],{"type":949,"url":1643},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":946,"url":1645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":949,"url":1647},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":949,"url":1649},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":954,"url":1323},{"type":949,"url":1652},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":954,"url":1654},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":946,"url":1656},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":131,"slug":1659,"dossier":90,"summary":1660,"aliases":1661,"sourceIds":1664,"published":1665,"modified":1666,"checkedAt":7,"severity":1667,"references":1671,"versionKeys":1680,"packageCount":32,"repositoryCount":1685},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1662,1663],"CVE-2026-45409","PYSEC-2026-215",[131,1663],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[1668,1669],{"type":936,"score":1201},{"type":939,"score":1670},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1672,1674,1676,1678],{"type":946,"url":1673},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":946,"url":1675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":954,"url":1677},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":949,"url":1679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1681,1682,1683,1684],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",21,{"id":132,"slug":1687,"dossier":47,"summary":1688,"aliases":1689,"sourceIds":1692,"published":1693,"modified":1694,"checkedAt":7,"severity":1695,"references":1699,"versionKeys":1711,"packageCount":32,"repositoryCount":966},"ghsa-6p8h-3wgx-97gf-635a010c","GitPython: Incomplete unsafe_git_clone_options denylist omits --template enabling arbitrary command execution via clone hooks",[1690,1691],"CVE-2026-73623","PYSEC-2026-3952",[132,1691],"2026-07-24T16:42:09Z","2026-09-10T13:11:03.995690741Z",[1696,1698],{"type":936,"score":1697},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":936,"score":1040},[1700,1702,1704,1706,1707,1709],{"type":943,"url":1701},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-6p8h-3wgx-97gf",{"type":949,"url":1703},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2180",{"type":949,"url":1705},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fffcb5359e87619f4fe4a70a4aff5f08c5580ba97",{"type":954,"url":955},{"type":949,"url":1708},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.54",{"type":946,"url":1710},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-template",[963,964,965],{"id":133,"slug":1713,"dossier":90,"summary":1714,"aliases":1715,"sourceIds":1719,"published":1720,"modified":1721,"checkedAt":7,"severity":1722,"references":1724,"versionKeys":1737,"packageCount":32,"repositoryCount":1336},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[1716,1717,1718],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[133,1718],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[1723],{"type":936,"score":1149},[1725,1727,1729,1731,1733,1735,1736],{"type":943,"url":1726},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":946,"url":1728},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":985,"url":1730},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":985,"url":1732},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":949,"url":1734},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":954,"url":1323},{"type":946,"url":1652},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":134,"slug":1739,"dossier":47,"summary":1740,"aliases":1741,"sourceIds":1744,"published":1745,"modified":1746,"checkedAt":7,"severity":1747,"references":1752,"versionKeys":1760,"packageCount":32,"repositoryCount":966},"ghsa-7545-fcxq-7j24-84dd19fd","GitPython reference APIs has a path traversal vulnerability that allows arbitrary file write and delete outside the repository",[1742,1743],"CVE-2026-44243","PYSEC-2026-2162",[134,1743],"2026-05-06T19:38:48Z","2026-09-10T03:50:45.903378498Z",[1748,1750],{"type":936,"score":1749},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":939,"score":1751},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1753,1755,1757,1758],{"type":943,"url":1754},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7545-fcxq-7j24",{"type":946,"url":1756},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44243",{"type":954,"url":955},{"type":985,"url":1759},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.48",[963,964,965],{"id":135,"slug":1762,"dossier":47,"summary":1763,"aliases":1764,"sourceIds":1767,"published":1768,"modified":1769,"checkedAt":7,"severity":1770,"references":1777,"versionKeys":1792,"packageCount":32,"repositoryCount":966},"ghsa-7833-fr7j-v32q-fd003872","GitPython: Arbitrary local file content disclosure via [include] directive in untrusted .gitmodules (SubmoduleConfigParser never disables merge_includes)",[1765,1766],"CVE-2026-78675","PYSEC-2026-3785",[135,1766],"2026-08-25T02:16:51.887Z","2026-09-23T05:15:05.931147061Z",[1771,1773,1775],{"type":936,"score":1772},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":939,"score":1774},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":936,"score":1776},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1778,1780,1782,1784,1786,1787,1788,1790],{"type":943,"url":1779},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-7833-fr7j-v32q",{"type":946,"url":1781},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78675",{"type":949,"url":1783},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2211",{"type":949,"url":1785},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fef7568e3b317ce617eacda39b8b54dcdff8c3b5c",{"type":954,"url":955},{"type":949,"url":1271},{"type":949,"url":1789},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3785.yaml",{"type":946,"url":1791},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-local-file-content-disclosure-via-gitmodules",[963,964,965],{"id":136,"slug":1794,"dossier":47,"summary":1795,"aliases":1796,"sourceIds":1800,"published":1801,"modified":1802,"checkedAt":7,"severity":1803,"references":1810,"versionKeys":1822,"packageCount":32,"repositoryCount":66},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[1797,1798,1799],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[136,1798,1799],"2026-03-11T22:17:00Z","2026-09-10T03:50:44.255695398Z",[1804,1806,1808],{"type":936,"score":1805},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":936,"score":1807},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":936,"score":1809},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1811,1813,1815,1816,1818,1820],{"type":946,"url":1812},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":949,"url":1814},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":954,"url":1212},{"type":949,"url":1817},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":946,"url":1819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":946,"url":1821},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[1216,1217,1218,1219],{"id":137,"slug":1824,"dossier":47,"summary":1825,"aliases":1826,"sourceIds":1829,"published":1830,"modified":1831,"checkedAt":7,"severity":1832,"references":1834,"versionKeys":1847,"packageCount":32,"repositoryCount":103},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[1827,1828],"CVE-2025-47287","PYSEC-2026-1974",[137,1828],"2025-05-16T14:12:40Z","2026-09-10T03:50:24.284224963Z",[1833],{"type":936,"score":1149},[1835,1837,1839,1841,1842,1844,1845],{"type":949,"url":1836},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":946,"url":1838},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":949,"url":1840},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":954,"url":1212},{"type":949,"url":1843},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":954,"url":1295},{"type":946,"url":1846},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[1216],{"id":138,"slug":1849,"dossier":47,"summary":1850,"aliases":1851,"sourceIds":1854,"published":1855,"modified":1856,"checkedAt":7,"severity":1857,"references":1860,"versionKeys":1877,"packageCount":32,"repositoryCount":1888},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[1852,1853],"CVE-2026-0994","PYSEC-2026-1805",[138,1853],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[1858],{"type":939,"score":1859},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[1861,1863,1865,1867,1869,1871,1873,1875],{"type":946,"url":1862},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":949,"url":1864},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":949,"url":1866},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":949,"url":1868},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":949,"url":1870},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":954,"url":1872},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":954,"url":1874},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":946,"url":1876},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[1878,1879,1880,1881,1882,1883,1884,1885,1886,1887],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",13,{"id":139,"slug":1890,"dossier":47,"summary":1891,"aliases":1892,"sourceIds":1895,"published":1896,"modified":1897,"checkedAt":7,"severity":1898,"references":1903,"versionKeys":1914,"packageCount":32,"repositoryCount":315},"ghsa-7p48-42j8-8846-584b0522","Unauthenticated SSRF Vulnerability in Streamlit on Windows (NTLM Credential Exposure)",[1893,1894],"CVE-2026-33682","PYSEC-2026-2285",[139,1894],"2026-03-25T21:20:52Z","2026-07-13T07:26:25.253864212Z",[1899,1901],{"type":936,"score":1900},"CVSS:3.1\u002FAV:A\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":936,"score":1902},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[1904,1906,1908,1910,1912],{"type":946,"url":1905},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fsecurity\u002Fadvisories\u002FGHSA-7p48-42j8-8846",{"type":946,"url":1907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33682",{"type":985,"url":1909},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002F23692ca70b2f2ac720c72d1feb4f190c9d6eed76",{"type":954,"url":1911},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit",{"type":946,"url":1913},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Freleases\u002Ftag\u002F1.54.0",[1915,1916,1917],"pypi:streamlit@1.49.0","pypi:streamlit@1.49.1","pypi:streamlit@1.51.0",{"id":140,"slug":1919,"dossier":47,"summary":1920,"aliases":1921,"sourceIds":1923,"published":1924,"modified":1925,"checkedAt":7,"severity":1926,"references":1929,"versionKeys":1938,"packageCount":32,"repositoryCount":284},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[1922],"CVE-2026-63374",[140],"2026-09-18T17:17:18Z","2026-09-18T17:30:07.278457589Z",[1927],{"type":939,"score":1928},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1930,1932,1934,1936,1937],{"type":949,"url":1931},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":949,"url":1933},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":949,"url":1935},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":954,"url":1511},{"type":949,"url":1513},[1515,1516,1517,1518,1519,1520,1521,1522],{"id":141,"slug":1940,"dossier":47,"summary":1941,"aliases":1942,"sourceIds":1944,"published":1945,"modified":1946,"checkedAt":7,"severity":1947,"references":1949,"versionKeys":1961,"packageCount":32,"repositoryCount":294},"ghsa-8423-8fgw-73vq-142b238e","tornado: multipart split() creates huge temp list before max_parts check -> memory amplification DoS (httputil.py:34)",[1943],"CVE-2026-91990",[141],"2026-09-01T20:17:38Z","2026-09-16T03:56:01.992806508Z",[1948],{"type":939,"score":1670},[1950,1952,1954,1956,1958,1959],{"type":949,"url":1951},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-8423-8fgw-73vq",{"type":949,"url":1953},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3704",{"type":949,"url":1955},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fde85b3f87446e323e881bbaa3d5a74f4b76e5f05",{"type":949,"url":1957},"https:\u002F\u002Fgist.github.com\u002Fafldl\u002F649861f25d39b53b7edbe0298e171617",{"type":954,"url":1212},{"type":949,"url":1960},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.8",[1216,1217,1218,1219,1220,1221],{"id":142,"slug":1963,"dossier":47,"summary":1964,"aliases":1965,"sourceIds":1969,"published":1970,"modified":1971,"checkedAt":7,"severity":1972,"references":1976,"versionKeys":1998,"packageCount":32,"repositoryCount":1363},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[1966,1967,1968],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[142,1968],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[1973,1974],{"type":936,"score":1107},{"type":939,"score":1975},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1977,1979,1981,1983,1985,1987,1988,1990,1992,1994,1996],{"type":946,"url":1978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":949,"url":1980},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":949,"url":1982},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":949,"url":1984},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":949,"url":1986},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":954,"url":1123},{"type":949,"url":1989},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":949,"url":1991},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":949,"url":1993},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":954,"url":1995},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":946,"url":1997},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1135,1136,1137,1999,2000],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":143,"slug":2002,"dossier":90,"summary":2003,"aliases":2004,"sourceIds":2006,"published":2007,"modified":2008,"checkedAt":7,"severity":2009,"references":2012,"versionKeys":2026,"packageCount":32,"repositoryCount":2029},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[2005],"CVE-2026-97687",[143],"2026-09-30T14:46:04Z","2026-09-30T15:00:05.369237042Z",[2010],{"type":939,"score":2011},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2013,2015,2017,2019,2021,2023,2024],{"type":949,"url":2014},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":946,"url":2016},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":949,"url":2018},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":949,"url":2020},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":949,"url":2022},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":954,"url":1086},{"type":949,"url":2025},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",[1090,1091,1092,1093,1094,2027,2028],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",22,{"id":144,"slug":2031,"dossier":47,"summary":2032,"aliases":2033,"sourceIds":2036,"published":2037,"modified":2038,"checkedAt":7,"severity":2039,"references":2046,"versionKeys":2061,"packageCount":32,"repositoryCount":966},"ghsa-8mcc-hrx5-hvxc-9da62a9f","GitPython: clone_from()\u002Fclone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destination",[2034,2035],"CVE-2026-78677","PYSEC-2026-3787",[144,2035],"2026-08-25T02:16:52.173Z","2026-09-08T19:00:06.914140693Z",[2040,2042,2044],{"type":936,"score":2041},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":939,"score":2043},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":939,"score":2045},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2047,2049,2051,2053,2055,2056,2057,2059],{"type":943,"url":2048},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-8mcc-hrx5-hvxc",{"type":946,"url":2050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-78677",{"type":949,"url":2052},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2210",{"type":949,"url":2054},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fb68afff45af0f49e79a3e2d2162018986b37ad5d",{"type":954,"url":955},{"type":949,"url":1271},{"type":949,"url":2058},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3787.yaml",{"type":946,"url":2060},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-separate-git-dir",[963,964,965],{"id":145,"slug":2063,"dossier":47,"summary":2064,"aliases":2065,"sourceIds":2068,"published":2069,"modified":2070,"checkedAt":7,"severity":2071,"references":2074,"versionKeys":2093,"packageCount":32,"repositoryCount":315},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[2066,2067],"CVE-2025-4565","PYSEC-2026-1806",[145,2067],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[2072],{"type":939,"score":2073},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2075,2077,2079,2081,2083,2084,2086,2088,2090,2091],{"type":949,"url":2076},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":949,"url":2078},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":946,"url":2080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":949,"url":2082},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":954,"url":1872},{"type":949,"url":2085},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":949,"url":2087},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":949,"url":2089},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":954,"url":1874},{"type":946,"url":2092},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[1878,1880,1881],{"id":146,"slug":2095,"dossier":90,"summary":2096,"aliases":2097,"sourceIds":2101,"published":2102,"modified":2103,"checkedAt":7,"severity":2104,"references":2106,"versionKeys":2116,"packageCount":32,"repositoryCount":1336},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[2098,2099,2100],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[146,2100],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[2105],{"type":936,"score":1149},[2107,2109,2111,2112,2114,2115],{"type":943,"url":2108},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":946,"url":2110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":985,"url":1319},{"type":949,"url":2113},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":954,"url":1323},{"type":946,"url":1325},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":147,"slug":2118,"dossier":47,"summary":2119,"aliases":2120,"sourceIds":2123,"published":2124,"modified":2125,"checkedAt":7,"severity":2126,"references":2129,"versionKeys":2143,"packageCount":32,"repositoryCount":966},"ghsa-94p4-4cq8-9g67-9a288a09","GitPython: Environment-variable exfiltration via Repo.create_remote() \u002F Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)",[2121,2122],"CVE-2026-73622","PYSEC-2026-3951",[147,2122],"2026-07-24T21:45:16Z","2026-09-24T14:45:07.411775302Z",[2127,2128],{"type":936,"score":2041},{"type":939,"score":2045},[2130,2132,2134,2136,2137,2139,2141],{"type":943,"url":2131},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-94p4-4cq8-9g67",{"type":949,"url":2133},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F863417457a0633db7ea5aed4fd01e0b291a41162",{"type":985,"url":2135},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F8ac5a30519b6f4af85398b9b9d7064ff4d452da2",{"type":954,"url":955},{"type":949,"url":2138},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.55",{"type":949,"url":2140},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3951.yaml",{"type":946,"url":2142},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-remote-add",[963,964,965],{"id":148,"slug":2145,"dossier":47,"summary":2146,"aliases":2147,"sourceIds":2150,"published":2151,"modified":2152,"checkedAt":7,"severity":2153,"references":2155,"versionKeys":2171,"packageCount":32,"repositoryCount":966},"ghsa-956x-8gvw-wg5v-f5d32b2d","GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` \u002F `Repo.blame()`",[2148,2149],"CVE-2026-67323","PYSEC-2026-3839",[148,2149],"2026-07-21T20:10:06Z","2026-09-10T12:25:39.217544351Z",[2154],{"type":936,"score":1772},[2156,2158,2160,2162,2164,2165,2166,2168,2169],{"type":949,"url":2157},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",{"type":946,"url":2159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67323",{"type":949,"url":2161},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2163",{"type":949,"url":2163},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F701ce32fe5ba8cb622c0e0342a376a6beb47d738",{"type":954,"url":955},{"type":949,"url":1052},{"type":949,"url":2167},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-injection-via-unguarded-git-options",{"type":954,"url":1056},{"type":946,"url":2170},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-956x-8gvw-wg5v",[963,964,965],{"id":149,"slug":2173,"dossier":47,"summary":2174,"aliases":2175,"sourceIds":2178,"published":2179,"modified":2180,"checkedAt":7,"severity":2181,"references":2184,"versionKeys":2203,"packageCount":32,"repositoryCount":1363},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[2176,2177],"CVE-2024-47081","PYSEC-2026-1872",[149,2177],"2025-06-09T19:06:08Z","2026-09-10T03:50:25.139398550Z",[2182],{"type":936,"score":2183},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2185,2187,2189,2191,2193,2195,2197,2199,2201],{"type":949,"url":2186},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":946,"url":2188},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":949,"url":2190},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":985,"url":2192},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":954,"url":2194},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":949,"url":2196},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":949,"url":2198},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":954,"url":2200},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":946,"url":2202},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[2204,2205],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":150,"slug":2207,"dossier":90,"summary":2208,"aliases":2209,"sourceIds":2213,"published":2214,"modified":2215,"checkedAt":7,"severity":2216,"references":2218,"versionKeys":2231,"packageCount":32,"repositoryCount":1336},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[2210,2211,2212],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[150,2212],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[2217],{"type":936,"score":1149},[2219,2221,2223,2225,2227,2229,2230],{"type":943,"url":2220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":946,"url":2222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":985,"url":2224},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":985,"url":2226},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":949,"url":2228},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":954,"url":1323},{"type":946,"url":1652},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":151,"slug":2233,"dossier":47,"summary":2234,"aliases":2235,"sourceIds":2238,"published":2239,"modified":2240,"checkedAt":7,"severity":2241,"references":2243,"versionKeys":2258,"packageCount":32,"repositoryCount":966},"ghsa-9rj7-rf2p-w77r-996a0359","GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks",[2236,2237],"CVE-2026-76218","PYSEC-2026-3840",[151,2237],"2026-08-07T15:36:43Z","2026-09-10T12:25:55.324487522Z",[2242],{"type":936,"score":1697},[2244,2246,2248,2249,2251,2252,2253,2255,2256],{"type":949,"url":2245},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",{"type":946,"url":2247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76218",{"type":949,"url":1381},{"type":949,"url":2250},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fd9ddb55bdc66",{"type":954,"url":955},{"type":949,"url":1386},{"type":949,"url":2254},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-repo-init",{"type":954,"url":1056},{"type":946,"url":2257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9rj7-rf2p-w77r",[963,964,965],{"id":152,"slug":2260,"dossier":47,"summary":2261,"aliases":2262,"sourceIds":2265,"published":2266,"modified":2267,"checkedAt":7,"severity":2268,"references":2271,"versionKeys":2288,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2263,2264],"CVE-2024-35195","PYSEC-2026-1873",[152,2264],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[2269],{"type":936,"score":2270},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2272,2274,2276,2278,2280,2281,2283,2285,2286],{"type":949,"url":2273},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":946,"url":2275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":949,"url":2277},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":985,"url":2279},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":954,"url":2194},{"type":949,"url":2282},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":949,"url":2284},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":954,"url":2200},{"type":946,"url":2287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[2204],{"id":153,"slug":2290,"dossier":47,"summary":2291,"aliases":2292,"sourceIds":2293,"published":2294,"modified":2295,"checkedAt":7,"severity":2296,"references":2299,"versionKeys":2309,"packageCount":32,"repositoryCount":42},"ghsa-c2m8-h5v5-343r-dd3a7510","Tornado: StaticFileHandler follows symlinks outside static root (path traversal)",[],[153],"2026-09-30T23:48:55Z","2026-10-01T00:00:05.755450749Z",[2297],{"type":939,"score":2298},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2300,2302,2303,2305,2307,2308],{"type":949,"url":2301},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c2m8-h5v5-343r",{"type":949,"url":1206},{"type":949,"url":2304},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F437ab5f76565403b3403438d2e555d11f8128d32",{"type":949,"url":2306},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Ff9f50b8bab265a2abf9f2415a3d2da6264a5450b",{"type":954,"url":1212},{"type":949,"url":1214},[1216,1217,1218,1219,1220,1221,1222],{"id":154,"slug":2311,"dossier":47,"summary":2312,"aliases":2313,"sourceIds":2317,"published":2318,"modified":2319,"checkedAt":7,"severity":2320,"references":2325,"versionKeys":2341,"packageCount":32,"repositoryCount":103},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[2314,2315,2316],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[154],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[2321,2323],{"type":936,"score":2322},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":939,"score":2324},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2326,2328,2330,2332,2333,2335,2337,2339],{"type":946,"url":2327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":949,"url":2329},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":949,"url":2331},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":954,"url":1123},{"type":949,"url":2334},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":949,"url":2336},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":949,"url":2338},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":949,"url":2340},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1135,1136],{"id":155,"slug":2343,"dossier":47,"summary":2344,"aliases":2345,"sourceIds":2348,"published":2349,"modified":2350,"checkedAt":7,"severity":2351,"references":2353,"versionKeys":2365,"packageCount":32,"repositoryCount":1363},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[2346,2347],"CVE-2025-67725","PYSEC-2025-266",[155,2347],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[2352],{"type":936,"score":1149},[2354,2356,2358,2360,2362,2363],{"type":946,"url":2355},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":946,"url":2357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":985,"url":2359},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":949,"url":2361},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":954,"url":1212},{"type":946,"url":2364},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[1216,1217,1218],{"id":156,"slug":2367,"dossier":47,"summary":2368,"aliases":2369,"sourceIds":2373,"published":2374,"modified":2375,"checkedAt":7,"severity":2376,"references":2379,"versionKeys":2419,"packageCount":32,"repositoryCount":2420},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2370,2371,2372],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[156,2372],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[2377,2378],{"type":939,"score":1774},{"type":936,"score":1149},[2380,2382,2384,2386,2388,2390,2391,2393,2395,2397,2399,2401,2403,2405,2407,2409,2411,2413,2415,2417],{"type":949,"url":2381},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":946,"url":2383},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":949,"url":2385},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":949,"url":2387},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":949,"url":2389},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":954,"url":1323},{"type":949,"url":2392},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":949,"url":2394},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":949,"url":2396},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":946,"url":2398},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":946,"url":2400},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":946,"url":2402},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":946,"url":2404},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":946,"url":2406},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":946,"url":2408},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":946,"url":2410},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":946,"url":2412},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":946,"url":2414},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":946,"url":2416},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":946,"url":2418},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1327,1328,1329,1330,1331,1332,1333],15,{"id":157,"slug":2422,"dossier":47,"summary":2423,"aliases":2424,"sourceIds":2425,"published":2426,"modified":2427,"checkedAt":7,"severity":2428,"references":2430,"versionKeys":2444,"packageCount":32,"repositoryCount":42},"ghsa-chx6-46f5-w4vp-dd54bdb8","tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM",[],[157],"2026-09-30T23:49:13Z","2026-10-01T00:00:05.755453229Z",[2429],{"type":936,"score":1149},[2431,2433,2434,2436,2438,2440,2442,2443],{"type":949,"url":2432},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-chx6-46f5-w4vp",{"type":949,"url":1206},{"type":949,"url":2435},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F15f056080d8e456f92cca8ad0c33e5a5480414ac",{"type":949,"url":2437},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6564e0a0922c16f239d3a18adccd04736e380c89",{"type":949,"url":2439},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Faa2eb0d989716ac00fe8d7a9919b81c1eccd6ec4",{"type":949,"url":2441},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fe412435febba4569c552c5c9054f1bf92bd171a9",{"type":954,"url":1212},{"type":949,"url":1214},[1216,1217,1218,1219,1220,1221,1222],{"id":158,"slug":2446,"dossier":47,"summary":2447,"aliases":2448,"sourceIds":2451,"published":2452,"modified":2453,"checkedAt":7,"severity":2454,"references":2457,"versionKeys":2474,"packageCount":32,"repositoryCount":103},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2449,2450],"CVE-2025-27516","PYSEC-2026-1471",[158,2450],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[2455],{"type":939,"score":2456},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2458,2460,2462,2464,2466,2468,2470,2472],{"type":949,"url":2459},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":946,"url":2461},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":985,"url":2463},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":954,"url":2465},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":949,"url":2467},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":949,"url":2469},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":954,"url":2471},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":946,"url":2473},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2475,2476],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":159,"slug":2478,"dossier":47,"summary":2479,"aliases":2480,"sourceIds":2483,"published":2484,"modified":2485,"checkedAt":7,"severity":2486,"references":2489,"versionKeys":2500,"packageCount":32,"repositoryCount":66},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[2481,2482],"CVE-2026-49854","PYSEC-2026-3388",[159,2482],"2026-06-12T18:30:19Z","2026-09-10T03:50:49.232529305Z",[2487],{"type":936,"score":2488},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2490,2492,2493,2495,2496,2498],{"type":949,"url":2491},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":954,"url":1212},{"type":949,"url":2494},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":954,"url":1295},{"type":946,"url":2497},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":946,"url":2499},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[1216,1217,1218,1219,1220],{"id":160,"slug":2502,"dossier":47,"summary":2503,"aliases":2504,"sourceIds":2508,"published":2509,"modified":2510,"checkedAt":7,"severity":2511,"references":2515,"versionKeys":2531,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2505,2506,2507],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[160,2507],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[2512,2513],{"type":936,"score":937},{"type":939,"score":2514},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2516,2518,2520,2522,2523,2525,2527,2529],{"type":946,"url":2517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":949,"url":2519},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":949,"url":2521},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":954,"url":1549},{"type":949,"url":2524},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":949,"url":2526},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":954,"url":2528},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":946,"url":2530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1555],{"id":161,"slug":2533,"dossier":47,"summary":2534,"aliases":2535,"sourceIds":2539,"published":2540,"modified":2541,"checkedAt":7,"severity":2542,"references":2547,"versionKeys":2565,"packageCount":32,"repositoryCount":103},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[2536,2537,2538],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[161],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[2543,2545],{"type":936,"score":2544},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":939,"score":2546},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2548,2550,2552,2554,2556,2558,2559,2561,2563],{"type":946,"url":2549},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":949,"url":2551},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":949,"url":2553},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":949,"url":2555},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":949,"url":2557},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":954,"url":1123},{"type":949,"url":2560},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":949,"url":2562},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":949,"url":2564},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1135,1136],{"id":162,"slug":2567,"dossier":90,"summary":2568,"aliases":2569,"sourceIds":2573,"published":2574,"modified":2575,"checkedAt":7,"severity":2576,"references":2579,"versionKeys":2593,"packageCount":32,"repositoryCount":1336},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2570,2571,2572],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[162,2572],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[2577],{"type":936,"score":2578},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2580,2582,2584,2586,2588,2589,2590,2591],{"type":949,"url":2581},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":946,"url":2583},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":949,"url":2585},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":949,"url":2587},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":954,"url":1323},{"type":949,"url":1652},{"type":954,"url":1654},{"type":946,"url":2592},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":163,"slug":2595,"dossier":47,"summary":2596,"aliases":2597,"sourceIds":2600,"published":2601,"modified":2602,"checkedAt":7,"severity":2603,"references":2606,"versionKeys":2616,"packageCount":32,"repositoryCount":966},"ghsa-fjr4-x663-mwxc-324b7aa5","GitPython: Arbitrary file overwrite via git diff --output argument injection in Diffable.diff (key- and value-controlled)",[2598,2599],"CVE-2026-73624","PYSEC-2026-3995",[163,2599],"2026-07-24T16:41:20Z","2026-09-29T09:10:55.738617943Z",[2604,2605],{"type":936,"score":1176},{"type":939,"score":1178},[2607,2609,2610,2612,2613,2614],{"type":943,"url":2608},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-fjr4-x663-mwxc",{"type":949,"url":1703},{"type":949,"url":2611},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F1d51b891d7f236044a6aa17498ec682b63dad6e6",{"type":954,"url":955},{"type":949,"url":1708},{"type":946,"url":2615},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-overwrite-via-diff",[963,964,965],{"id":164,"slug":2618,"dossier":47,"summary":2619,"aliases":2620,"sourceIds":2623,"published":2624,"modified":2625,"checkedAt":7,"severity":2626,"references":2628,"versionKeys":2641,"packageCount":32,"repositoryCount":966},"ghsa-g5vv-9gxw-82hx-203070a6","GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author\u002Fcommitter field parsing",[2621,2622],"CVE-2026-87819","PYSEC-2026-3984",[164,2622],"2026-09-09T12:17:17.120Z","2026-09-30T23:45:04.037560336Z",[2627],{"type":936,"score":1149},[2629,2631,2633,2635,2636,2637,2639],{"type":943,"url":2630},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-g5vv-9gxw-82hx",{"type":949,"url":2632},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2215",{"type":949,"url":2634},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F751473a5f3221d6f989291cbebcc404353fd3ba8",{"type":954,"url":955},{"type":949,"url":957},{"type":949,"url":2638},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3984.yaml",{"type":946,"url":2640},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-3.1.60-denial-of-service-via-redos",[963,964,965],{"id":165,"slug":2643,"dossier":90,"summary":2644,"aliases":2645,"sourceIds":2648,"published":2649,"modified":2650,"checkedAt":7,"severity":2651,"references":2656,"versionKeys":2666,"packageCount":32,"repositoryCount":2669},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[2646,2647],"CVE-2026-25645","PYSEC-2026-2275",[165,2647],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[2652,2654],{"type":936,"score":2653},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":936,"score":2655},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2657,2659,2661,2663,2664],{"type":946,"url":2658},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":946,"url":2660},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":985,"url":2662},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":954,"url":2194},{"type":946,"url":2665},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[2204,2205,2667,2668],"pypi:requests@2.32.4","pypi:requests@2.32.5",18,{"id":166,"slug":2671,"dossier":47,"summary":2672,"aliases":2673,"sourceIds":2675,"published":2676,"modified":2677,"checkedAt":7,"severity":2678,"references":2680,"versionKeys":2689,"packageCount":32,"repositoryCount":2690},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[2674],"CVE-2026-97688",[166],"2026-09-30T15:00:38Z","2026-09-30T15:15:04.066660799Z",[2679],{"type":939,"score":1670},[2681,2683,2685,2687,2688],{"type":949,"url":2682},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":946,"url":2684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":949,"url":2686},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":954,"url":1086},{"type":949,"url":2025},[2027,2028],7,{"id":167,"slug":2692,"dossier":47,"summary":2693,"aliases":2694,"sourceIds":2697,"published":2698,"modified":2699,"checkedAt":7,"severity":2700,"references":2702,"versionKeys":2713,"packageCount":32,"repositoryCount":284},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2695,2696],"CVE-2025-66418","PYSEC-2026-1998",[167,2696],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[2701],{"type":939,"score":1071},[2703,2705,2707,2709,2710,2711],{"type":949,"url":2704},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":946,"url":2706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":985,"url":2708},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":954,"url":1086},{"type":954,"url":1088},{"type":946,"url":2712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1090,1091,1092,1093,1094],{"id":168,"slug":2715,"dossier":47,"summary":2716,"aliases":2717,"sourceIds":2720,"published":2721,"modified":2722,"checkedAt":7,"severity":2723,"references":2726,"versionKeys":2741,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2718,2719],"CVE-2024-56201","PYSEC-2026-1472",[168,2719],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[2724,2725],{"type":936,"score":1040},{"type":939,"score":2456},[2727,2729,2731,2733,2735,2736,2738,2739],{"type":949,"url":2728},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":946,"url":2730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":949,"url":2732},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":985,"url":2734},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":954,"url":2465},{"type":949,"url":2737},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":954,"url":2471},{"type":946,"url":2740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2475],{"id":169,"slug":2743,"dossier":90,"summary":2744,"aliases":2745,"sourceIds":2749,"published":2750,"modified":2751,"checkedAt":7,"severity":2752,"references":2755,"versionKeys":2767,"packageCount":32,"repositoryCount":2669},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[2746,2747,2748],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[169,2748],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[2753],{"type":936,"score":2754},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2756,2758,2760,2762,2764,2765],{"type":943,"url":2757},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":946,"url":2759},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":985,"url":2761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":949,"url":2763},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":954,"url":1549},{"type":946,"url":2766},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1555,1556,1557,1558,2768,2769,2770,2771,2772,2773,2774,2775],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":170,"slug":2777,"dossier":47,"summary":2778,"aliases":2779,"sourceIds":2782,"published":2783,"modified":2784,"checkedAt":7,"severity":2785,"references":2787,"versionKeys":2808,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2780,2781],"CVE-2024-34064","PYSEC-2026-1474",[170,2781],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[2786],{"type":936,"score":1805},[2788,2790,2792,2794,2795,2797,2799,2801,2803,2805,2806],{"type":949,"url":2789},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":946,"url":2791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":985,"url":2793},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":954,"url":2465},{"type":949,"url":2796},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":949,"url":2798},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":949,"url":2800},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":949,"url":2802},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":949,"url":2804},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":954,"url":2471},{"type":946,"url":2807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2475],{"id":171,"slug":2810,"dossier":47,"summary":2811,"aliases":2812,"sourceIds":2815,"published":2816,"modified":2817,"checkedAt":7,"severity":2818,"references":2820,"versionKeys":2835,"packageCount":32,"repositoryCount":966},"ghsa-hh9p-6wh2-4mfc-8e33cff1","GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()",[2813,2814],"CVE-2026-76217","PYSEC-2026-3841",[171,2814],"2026-08-07T15:43:56Z","2026-09-10T12:26:07.095223621Z",[2819],{"type":936,"score":1259},[2821,2823,2825,2826,2828,2829,2830,2832,2833],{"type":949,"url":2822},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",{"type":946,"url":2824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76217",{"type":949,"url":1381},{"type":949,"url":2827},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Ff2550b65bf60ca087190981e2c7b6865e201f40c",{"type":954,"url":955},{"type":949,"url":1386},{"type":949,"url":2831},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-read-via-pathspec-from-file",{"type":954,"url":1056},{"type":946,"url":2834},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hh9p-6wh2-4mfc",[963,964,965],{"id":172,"slug":2837,"dossier":47,"summary":2838,"aliases":2839,"sourceIds":2842,"published":2843,"modified":2844,"checkedAt":7,"severity":2845,"references":2850,"versionKeys":2867,"packageCount":32,"repositoryCount":966},"ghsa-hmq2-w58f-27jc-f0b0fe70","GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvalidated .gitmodules Submodule Name in GitPython",[2840,2841],"CVE-2026-76222","PYSEC-2026-3784",[172,2841],"2026-08-07T15:45:39Z","2026-09-08T21:00:05.149418166Z",[2846,2848],{"type":936,"score":2847},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",{"type":939,"score":2849},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:H\u002FVA:L\u002FSC:N\u002FSI:H\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2851,2853,2855,2857,2859,2861,2862,2863,2865],{"type":943,"url":2852},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-hmq2-w58f-27jc",{"type":946,"url":2854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76222",{"type":949,"url":2856},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2202",{"type":949,"url":2858},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F4299c990e1ca21896f9485277caf7bb0ae5b404c",{"type":949,"url":2860},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe4b8e7d026ca6abb4cf604f8e77093432ce23c06",{"type":954,"url":955},{"type":949,"url":1386},{"type":949,"url":2864},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3784.yaml",{"type":946,"url":2866},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-path-traversal-via-gitmodules-submodule-name",[963,964,965],{"id":173,"slug":2869,"dossier":47,"summary":2870,"aliases":2871,"sourceIds":2874,"published":2875,"modified":2876,"checkedAt":7,"severity":2877,"references":2879,"versionKeys":2889,"packageCount":32,"repositoryCount":1363},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[2872,2873],"CVE-2025-67726","PYSEC-2025-267",[173,2873],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[2878],{"type":936,"score":1149},[2880,2882,2884,2885,2887,2888],{"type":946,"url":2881},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":946,"url":2883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":985,"url":2359},{"type":949,"url":2886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":954,"url":1212},{"type":946,"url":2364},[1216,1217,1218],{"id":174,"slug":2891,"dossier":90,"summary":2892,"aliases":2893,"sourceIds":2897,"published":2898,"modified":2899,"checkedAt":7,"severity":2900,"references":2902,"versionKeys":2916,"packageCount":32,"repositoryCount":1336},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[2894,2895,2896],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[174,2896],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[2901],{"type":936,"score":1149},[2903,2905,2907,2909,2911,2912,2913,2914],{"type":949,"url":2904},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":946,"url":2906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":949,"url":2908},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":949,"url":2910},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":954,"url":1323},{"type":949,"url":1652},{"type":954,"url":1654},{"type":946,"url":2915},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":175,"slug":2918,"dossier":47,"summary":2919,"aliases":2920,"sourceIds":2923,"published":2924,"modified":2925,"checkedAt":7,"severity":2926,"references":2930,"versionKeys":2940,"packageCount":32,"repositoryCount":966},"ghsa-jm78-9fvv-mhgr-2c167ddc","GitPython: git-config OPTION-name injection via =\u002F#\u002Fwhitespace bypasses name validator, enabling forged core.sshCommand\u002FhooksPath (RCE)",[2921,2922],"CVE-2026-76221","PYSEC-2026-3783",[175,2922],"2026-08-07T15:46:35Z","2026-09-10T03:51:14.296736368Z",[2927,2928],{"type":936,"score":1040},{"type":939,"score":2929},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2931,2933,2934,2936,2937,2938],{"type":943,"url":2932},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-jm78-9fvv-mhgr",{"type":949,"url":1381},{"type":949,"url":2935},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fa495ccd3b547ccd60b2187215823b72a9c0188bf",{"type":954,"url":955},{"type":949,"url":1386},{"type":946,"url":2939},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-config-injection-via-option-name",[963,964,965],{"id":176,"slug":2942,"dossier":47,"summary":2943,"aliases":2944,"sourceIds":2947,"published":2948,"modified":2949,"checkedAt":7,"severity":2950,"references":2953,"versionKeys":2961,"packageCount":32,"repositoryCount":315},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2945,2946],"CVE-2026-44432","PYSEC-2026-142",[176,2946],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[2951,2952],{"type":936,"score":1149},{"type":939,"score":1071},[2954,2956,2958,2960],{"type":946,"url":2955},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":946,"url":2957},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":949,"url":2959},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":954,"url":1086},[2027],{"id":177,"slug":2963,"dossier":47,"summary":2964,"aliases":2965,"sourceIds":2968,"published":2969,"modified":2970,"checkedAt":7,"severity":2971,"references":2973,"versionKeys":2982,"packageCount":32,"repositoryCount":66},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[2966,2967],"CVE-2026-49855","PYSEC-2026-3389",[177,2967],"2026-06-15T20:19:28Z","2026-09-10T03:51:09.080081033Z",[2972],{"type":936,"score":1149},[2974,2976,2977,2978,2980],{"type":949,"url":2975},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":954,"url":1212},{"type":954,"url":1295},{"type":946,"url":2979},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":946,"url":2981},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[1216,1217,1218,1219,1220],{"id":178,"slug":2984,"dossier":47,"summary":2985,"aliases":2986,"sourceIds":2989,"published":2990,"modified":2991,"checkedAt":7,"severity":2992,"references":2994,"versionKeys":3007,"packageCount":32,"repositoryCount":294},"ghsa-mpf4-983q-p7j4-9fb72bc8","Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop",[2987,2988],"CVE-2026-82397","PYSEC-2026-3928",[178,2988],"2026-09-02T14:38:43Z","2026-09-10T12:25:33.492830390Z",[2993],{"type":936,"score":1149},[2995,2997,2999,3000,3002,3003,3004,3005],{"type":949,"url":2996},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",{"type":946,"url":2998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-82397",{"type":949,"url":1953},{"type":949,"url":3001},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F8d6363ed7b69d5f0da806efe34d256627a2191de",{"type":954,"url":1212},{"type":949,"url":1960},{"type":954,"url":1295},{"type":946,"url":3006},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mpf4-983q-p7j4",[1216,1217,1218,1219,1220,1221],{"id":179,"slug":3009,"dossier":47,"summary":3010,"aliases":3011,"sourceIds":3014,"published":3015,"modified":3016,"checkedAt":7,"severity":3017,"references":3020,"versionKeys":3028,"packageCount":32,"repositoryCount":966},"ghsa-mv93-w799-cj2w-4413137a","GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath",[3012,3013],"CVE-2026-67326","PYSEC-2026-3980",[179,3013],"2026-05-08T23:19:02Z","2026-09-17T09:10:55.928803360Z",[3018,3019],{"type":936,"score":1234},{"type":936,"score":1776},[3021,3023,3025,3026],{"type":943,"url":3022},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-mv93-w799-cj2w",{"type":946,"url":3024},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":954,"url":955},{"type":946,"url":3027},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-newline-injection-via-config-writer-section",[963,964,965],{"id":180,"slug":3030,"dossier":47,"summary":3031,"aliases":3032,"sourceIds":3035,"published":3036,"modified":3037,"checkedAt":7,"severity":3038,"references":3043,"versionKeys":3055,"packageCount":32,"repositoryCount":966},"ghsa-p538-c434-8v24-c303e516","GitPython: Arbitrary file truncation via git rev-list --output argument injection in unguarded Commit.count",[3033,3034],"CVE-2026-73621","PYSEC-2026-3950",[180,3034],"2026-08-03T20:23:17Z","2026-09-10T13:10:55.177009469Z",[3039,3041],{"type":936,"score":3040},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":939,"score":3042},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3044,3046,3048,3050,3051,3053],{"type":943,"url":3045},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-p538-c434-8v24",{"type":949,"url":3047},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2184",{"type":949,"url":3049},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F38553b6fddc7f6a667cdb45a6762343a08fc72b2",{"type":954,"url":955},{"type":949,"url":3052},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.56",{"type":946,"url":3054},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-arbitrary-file-truncation-via-commit-count",[963,964,965],{"id":181,"slug":3057,"dossier":47,"summary":3058,"aliases":3059,"sourceIds":3063,"published":3064,"modified":3065,"checkedAt":7,"severity":3066,"references":3069,"versionKeys":3082,"packageCount":32,"repositoryCount":966},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[3060,3061,3062],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[181,3062],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[3067,3068],{"type":936,"score":1201},{"type":936,"score":1149},[3070,3072,3074,3076,3078,3080,3081],{"type":943,"url":3071},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":946,"url":3073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":985,"url":3075},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":985,"url":3077},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":949,"url":3079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":954,"url":1323},{"type":946,"url":1652},[1332,1333,1334,1335],{"id":182,"slug":3084,"dossier":90,"summary":3085,"aliases":3086,"sourceIds":3090,"published":3091,"modified":3092,"checkedAt":7,"severity":3093,"references":3095,"versionKeys":3106,"packageCount":32,"repositoryCount":1336},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[3087,3088,3089],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[182,3089],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[3094],{"type":936,"score":1149},[3096,3098,3100,3102,3104,3105],{"type":943,"url":3097},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":946,"url":3099},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":985,"url":3101},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":949,"url":3103},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":954,"url":1323},{"type":946,"url":1325},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":183,"slug":3108,"dossier":47,"summary":3109,"aliases":3110,"sourceIds":3113,"published":3114,"modified":3115,"checkedAt":7,"severity":3116,"references":3118,"versionKeys":3130,"packageCount":32,"repositoryCount":1363},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[3111,3112],"CVE-2025-50181","PYSEC-2026-1999",[183,3112],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[3117],{"type":936,"score":1348},[3119,3121,3123,3125,3126,3127,3128],{"type":949,"url":3120},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":946,"url":3122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":985,"url":3124},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":954,"url":1086},{"type":949,"url":1358},{"type":954,"url":1088},{"type":946,"url":3129},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1090,1091,1092,1093],{"id":184,"slug":3132,"dossier":47,"summary":3133,"aliases":3134,"sourceIds":3137,"published":3138,"modified":3139,"checkedAt":7,"severity":3140,"references":3144,"versionKeys":3155,"packageCount":32,"repositoryCount":1363},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[3135,3136],"CVE-2025-67724","PYSEC-2025-265",[184,3136],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[3141,3142],{"type":936,"score":1805},{"type":936,"score":3143},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3145,3147,3149,3151,3153,3154],{"type":946,"url":3146},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":946,"url":3148},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":985,"url":3150},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":949,"url":3152},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":954,"url":1212},{"type":946,"url":2364},[1216,1217,1218],{"id":185,"slug":3157,"dossier":47,"summary":3158,"aliases":3159,"sourceIds":3161,"published":3162,"modified":3163,"checkedAt":7,"severity":3164,"references":3167,"versionKeys":3171,"packageCount":32,"repositoryCount":66},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[3160],"CVE-2026-91992",[185],"2026-06-15T20:37:24Z","2026-09-16T03:56:01.290461498Z",[3165],{"type":936,"score":3166},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3168,3170],{"type":949,"url":3169},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":954,"url":1212},[1216,1217,1218,1219,1220],{"id":186,"slug":3173,"dossier":47,"summary":3174,"aliases":3175,"sourceIds":3179,"published":3180,"modified":3181,"checkedAt":7,"severity":3182,"references":3186,"versionKeys":3198,"packageCount":32,"repositoryCount":284},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[3176,3177,3178],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[186,3178],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[3183,3184],{"type":939,"score":1774},{"type":936,"score":3185},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3187,3188,3190,3192,3194,3196,3197],{"type":949,"url":2381},{"type":985,"url":3189},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":946,"url":3191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":985,"url":3193},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":985,"url":3195},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":954,"url":1323},{"type":946,"url":1603},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":187,"slug":3200,"dossier":47,"summary":3201,"aliases":3202,"sourceIds":3205,"published":3206,"modified":3207,"checkedAt":7,"severity":3208,"references":3211,"versionKeys":3224,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[3203,3204],"CVE-2024-56326","PYSEC-2026-1475",[187,3204],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[3209,3210],{"type":936,"score":1776},{"type":939,"score":2456},[3212,3214,3216,3218,3219,3220,3221,3222],{"type":949,"url":3213},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":946,"url":3215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":985,"url":3217},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":954,"url":2465},{"type":949,"url":2737},{"type":949,"url":2467},{"type":954,"url":2471},{"type":946,"url":3223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2475],{"id":188,"slug":3226,"dossier":90,"summary":3227,"aliases":3228,"sourceIds":3231,"published":3232,"modified":3233,"checkedAt":7,"severity":3234,"references":3238,"versionKeys":3244,"packageCount":32,"repositoryCount":2669},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[3229,3230],"CVE-2026-44431","PYSEC-2026-141",[188,3230],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[3235,3237],{"type":936,"score":3236},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":939,"score":2298},[3239,3241,3243],{"type":946,"url":3240},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":946,"url":3242},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":954,"url":1086},[1090,1091,1092,1093,1094,2027],{"id":189,"slug":3246,"dossier":47,"summary":3247,"aliases":3248,"sourceIds":3252,"published":3253,"modified":3254,"checkedAt":7,"severity":3255,"references":3259,"versionKeys":3277,"packageCount":32,"repositoryCount":1888},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[3249,3250,3251],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[189],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[3256,3257],{"type":936,"score":2544},{"type":939,"score":3258},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3260,3262,3264,3266,3268,3270,3271,3273,3275],{"type":946,"url":3261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":949,"url":3263},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":949,"url":3265},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":949,"url":3267},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":949,"url":3269},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":954,"url":1123},{"type":949,"url":3272},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":949,"url":3274},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":949,"url":3276},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1135,1136,1137,1999,2000,3278,3279,3280,3281],"pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":190,"slug":3283,"dossier":47,"summary":3284,"aliases":3285,"sourceIds":3288,"published":3289,"modified":3290,"checkedAt":7,"severity":3291,"references":3295,"versionKeys":3308,"packageCount":32,"repositoryCount":66},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[3286,3287],"CVE-2026-31958","PYSEC-2026-140",[190,3287],"2026-03-11T20:16:16.617Z","2026-09-10T03:50:40.522968763Z",[3292,3293],{"type":936,"score":1149},{"type":939,"score":3294},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3296,3298,3300,3302,3304,3305,3306],{"type":946,"url":3297},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":946,"url":3299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":949,"url":3301},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":949,"url":3303},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":954,"url":1212},{"type":949,"url":1817},{"type":949,"url":3307},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[1216,1217,1218,1219],{"id":191,"slug":3310,"dossier":47,"summary":3311,"aliases":3312,"sourceIds":3315,"published":3316,"modified":3317,"checkedAt":7,"severity":3318,"references":3321,"versionKeys":3336,"packageCount":32,"repositoryCount":1888},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[3313,3314],"CVE-2026-22701","PYSEC-2026-1374",[191,3314],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[3319],{"type":936,"score":3320},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3322,3324,3326,3328,3330,3332,3334],{"type":949,"url":3323},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":946,"url":3325},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":949,"url":3327},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":949,"url":3329},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":954,"url":3331},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":954,"url":3333},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":946,"url":3335},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3337,3338,3339,3340],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":192,"slug":3342,"dossier":47,"summary":3343,"aliases":3344,"sourceIds":3348,"published":3349,"modified":3350,"checkedAt":7,"severity":3351,"references":3354,"versionKeys":3368,"packageCount":32,"repositoryCount":284},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[3345,3346,3347],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[192,3347],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[3352,3353],{"type":936,"score":1111},{"type":939,"score":1595},[3355,3357,3359,3361,3363,3364,3365,3366],{"type":949,"url":3356},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":946,"url":3358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":949,"url":3360},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":949,"url":3362},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":954,"url":1323},{"type":949,"url":1603},{"type":954,"url":1654},{"type":946,"url":3367},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1327,1328,1329,1330,1331,1332,1333,1334],{"id":193,"slug":3370,"dossier":47,"summary":3371,"aliases":3372,"sourceIds":3375,"published":3376,"modified":3377,"checkedAt":7,"severity":3378,"references":3381,"versionKeys":3391,"packageCount":32,"repositoryCount":966},"ghsa-r9mr-m37c-5fr3-d43000fc","GitPython: Unsafe git option guard bypass via single-character kwarg value token smuggling enables arbitrary command execution",[3373,3374],"CVE-2026-73625","PYSEC-2026-3953",[193,3374],"2026-07-24T16:42:57Z","2026-09-10T13:10:47.448946391Z",[3379,3380],{"type":936,"score":1040},{"type":939,"score":2929},[3382,3384,3385,3387,3388,3389],{"type":943,"url":3383},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-r9mr-m37c-5fr3",{"type":949,"url":1703},{"type":949,"url":3386},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002Fe8d0fbf774d1f6baa3b481adfe48bd262e43b453",{"type":954,"url":955},{"type":949,"url":1708},{"type":946,"url":3390},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-remote-code-execution-via-kwarg-value-smuggling",[963,964,965],{"id":194,"slug":3393,"dossier":47,"summary":3394,"aliases":3395,"sourceIds":3398,"published":3399,"modified":3400,"checkedAt":7,"severity":3401,"references":3404,"versionKeys":3417,"packageCount":32,"repositoryCount":1888},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[3396,3397],"CVE-2026-25087","PYSEC-2026-113",[194,3397],"2026-02-17T14:16:01.947Z","2026-09-10T03:50:35.750182003Z",[3402],{"type":936,"score":3403},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[3405,3407,3409,3411,3413,3415],{"type":946,"url":3406},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":985,"url":3408},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":954,"url":3410},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":949,"url":3412},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":946,"url":3414},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":946,"url":3416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[3418,3419,3420,3421],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":195,"slug":3423,"dossier":47,"summary":3424,"aliases":3425,"sourceIds":3428,"published":3429,"modified":3430,"checkedAt":7,"severity":3431,"references":3433,"versionKeys":3441,"packageCount":32,"repositoryCount":966},"ghsa-rpm5-65cw-6hj4-6c97dd77","GitPython has Command Injection via Git options bypass",[3426,3427],"CVE-2026-42215","PYSEC-2026-2160",[195,3427],"2026-04-25T23:42:16Z","2026-09-10T03:51:03.167884784Z",[3432],{"type":936,"score":1040},[3434,3436,3438,3439],{"type":943,"url":3435},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rpm5-65cw-6hj4",{"type":946,"url":3437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42215",{"type":954,"url":955},{"type":985,"url":3440},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.47",[963,964,965],{"id":196,"slug":3443,"dossier":47,"summary":3444,"aliases":3445,"sourceIds":3449,"published":2540,"modified":3450,"checkedAt":7,"severity":3451,"references":3454,"versionKeys":3472,"packageCount":32,"repositoryCount":284},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[3446,3447,3448],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[196],"2026-09-10T03:49:48.419046410Z",[3452,3453],{"type":936,"score":2544},{"type":939,"score":3258},[3455,3457,3459,3461,3463,3465,3466,3468,3470],{"type":946,"url":3456},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":949,"url":3458},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":949,"url":3460},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":949,"url":3462},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":949,"url":3464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":954,"url":1123},{"type":949,"url":3467},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":949,"url":3469},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":949,"url":3471},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[3473,3474,3475,1135,1136,1137,1999,2000,3278,3279,3280,3281],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":197,"slug":3477,"dossier":47,"summary":3478,"aliases":3479,"sourceIds":3482,"published":3483,"modified":3484,"checkedAt":7,"severity":3485,"references":3487,"versionKeys":3505,"packageCount":32,"repositoryCount":966},"ghsa-rwj8-pgh3-r573-0bf779f8","GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL",[3480,3481],"CVE-2026-67322","PYSEC-2026-3842",[197,3481],"2026-07-21T22:06:09Z","2026-09-24T18:28:17.149390188Z",[3486],{"type":936,"score":2041},[3488,3490,3492,3494,3495,3497,3498,3500,3502,3503],{"type":949,"url":3489},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":946,"url":3491},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-67322",{"type":949,"url":3493},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fpull\u002F2172",{"type":949,"url":2135},{"type":946,"url":3496},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rwj8-pgh3-r573",{"type":954,"url":955},{"type":949,"url":3499},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.52",{"type":949,"url":3501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fgitpython\u002FPYSEC-2026-3842.yaml",{"type":954,"url":1056},{"type":949,"url":3504},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-environment-variable-exfiltration-via-clone-from",[963,964,965],{"id":198,"slug":3507,"dossier":47,"summary":3508,"aliases":3509,"sourceIds":3512,"published":3513,"modified":3514,"checkedAt":7,"severity":3515,"references":3517,"versionKeys":3525,"packageCount":32,"repositoryCount":966},"ghsa-v87r-6q3f-2j67-81913ca6","GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath",[3510,3511],"CVE-2026-44244","PYSEC-2026-2163",[198,3511],"2026-05-06T21:58:00Z","2026-09-10T03:50:47.691444343Z",[3516],{"type":936,"score":1776},[3518,3520,3522,3523],{"type":943,"url":3519},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-v87r-6q3f-2j67",{"type":946,"url":3521},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44244",{"type":954,"url":955},{"type":985,"url":3524},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Freleases\u002Ftag\u002F3.1.49",[963,964,965],{"id":199,"slug":3527,"dossier":47,"summary":3528,"aliases":3529,"sourceIds":3533,"published":2540,"modified":3534,"checkedAt":7,"severity":3535,"references":3538,"versionKeys":3553,"packageCount":32,"repositoryCount":42},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[3530,3531,3532],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[199],"2026-06-10T17:41:15.774477397Z",[3536,3537],{"type":936,"score":2544},{"type":939,"score":2546},[3539,3541,3542,3543,3544,3546,3547,3549,3551],{"type":946,"url":3540},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":949,"url":2551},{"type":949,"url":2553},{"type":949,"url":2555},{"type":949,"url":3545},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":954,"url":1123},{"type":949,"url":3548},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":949,"url":3550},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":949,"url":3552},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1135,1136,1137,1999,2000,3278,3279],{"id":200,"slug":3555,"dossier":90,"summary":3556,"aliases":3557,"sourceIds":3561,"published":3562,"modified":3563,"checkedAt":7,"severity":3564,"references":3566,"versionKeys":3580,"packageCount":32,"repositoryCount":1336},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[3558,3559,3560],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[200,3560],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[3565],{"type":939,"score":3294},[3567,3569,3571,3573,3575,3576,3577,3578],{"type":949,"url":3568},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":946,"url":3570},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":949,"url":3572},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":949,"url":3574},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":954,"url":1323},{"type":949,"url":1652},{"type":954,"url":1654},{"type":946,"url":3579},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":201,"slug":3582,"dossier":47,"summary":3583,"aliases":3584,"sourceIds":3587,"published":3588,"modified":3589,"checkedAt":7,"severity":3590,"references":3593,"versionKeys":3606,"packageCount":32,"repositoryCount":315},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[3585,3586],"CVE-2025-43859","PYSEC-2026-348",[201,3586],"2025-04-24T16:07:56Z","2026-09-10T03:50:24.086696793Z",[3591],{"type":936,"score":3592},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3594,3596,3598,3600,3602,3604],{"type":949,"url":3595},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":946,"url":3597},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":949,"url":3599},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":954,"url":3601},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":954,"url":3603},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":946,"url":3605},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[3607],"pypi:h11@0.14.0",{"id":202,"slug":3609,"dossier":47,"summary":3610,"aliases":3611,"sourceIds":3614,"published":3615,"modified":3616,"checkedAt":7,"severity":3617,"references":3624,"versionKeys":3650,"packageCount":32,"repositoryCount":315},"ghsa-vqwp-45wm-r9r5-eaa960a2","Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission",[3612,3613],"CVE-2026-10804","PYSEC-2026-212",[202,3613],"2026-06-04T12:16:24.620Z","2026-07-23T15:00:23.893493649Z",[3618,3620,3622],{"type":936,"score":3619},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":939,"score":3621},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":936,"score":3623},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3625,3627,3629,3631,3633,3635,3637,3638,3640,3642,3644,3646,3648],{"type":946,"url":3626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-10804",{"type":985,"url":3628},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fissues\u002F14622",{"type":985,"url":3630},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F14635",{"type":949,"url":3632},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fpull\u002F15397",{"type":949,"url":3634},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002Fcommit\u002Ffec0f584dae9261abed16cad35b32922104bb933",{"type":949,"url":3636},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstreamlit\u002FPYSEC-2026-212.yaml",{"type":954,"url":1911},{"type":946,"url":3639},"https:\u002F\u002Fvuldb.com\u002Fcve\u002FCVE-2026-10804",{"type":946,"url":3641},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F831508",{"type":946,"url":3643},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253",{"type":1116,"url":3645},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F368253\u002Fcti",{"type":949,"url":3647},"https:\u002F\u002Fgithub.com\u002Fstreamlit\u002Fstreamlit\u002F",{"type":946,"url":3649},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqwp-45wm-r9r5",[1915,1916,1917],{"id":203,"slug":3652,"dossier":90,"summary":3653,"aliases":3654,"sourceIds":3656,"published":3657,"modified":3658,"checkedAt":7,"severity":3659,"references":3661,"versionKeys":3670,"packageCount":32,"repositoryCount":2029},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[3655],"CVE-2026-97689",[203],"2026-09-30T14:46:18Z","2026-09-30T15:00:05.904945330Z",[3660],{"type":939,"score":1071},[3662,3664,3666,3668,3669],{"type":949,"url":3663},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":946,"url":3665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":949,"url":3667},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":954,"url":1086},{"type":949,"url":2025},[1090,1091,1092,1093,1094,2027,2028],{"id":204,"slug":3672,"dossier":47,"summary":3673,"aliases":3674,"sourceIds":3677,"published":3678,"modified":3679,"checkedAt":7,"severity":3680,"references":3683,"versionKeys":3700,"packageCount":32,"repositoryCount":1888},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[3675,3676],"CVE-2025-68146","PYSEC-2026-1375",[204,3676],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[3681],{"type":936,"score":3682},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3684,3686,3688,3689,3691,3693,3695,3696,3698],{"type":949,"url":3685},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":949,"url":3687},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":954,"url":3331},{"type":949,"url":3690},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":949,"url":3692},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":949,"url":3694},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":954,"url":3333},{"type":946,"url":3697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":946,"url":3699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3337,3338,3339,3340],{"id":205,"slug":3702,"dossier":47,"summary":3703,"aliases":3704,"sourceIds":3708,"published":3709,"modified":3710,"checkedAt":7,"severity":3711,"references":3714,"versionKeys":3752,"packageCount":32,"repositoryCount":284},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[3705,3706,3707],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[205,3707],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[3712,3713],{"type":936,"score":1149},{"type":939,"score":3294},[3715,3717,3719,3721,3723,3724,3726,3728,3730,3732,3734,3736,3737,3739,3741,3743,3744,3746,3748,3750],{"type":949,"url":3716},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":946,"url":3718},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":949,"url":3720},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":949,"url":3722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":954,"url":1323},{"type":949,"url":3725},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":949,"url":3727},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":949,"url":3729},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":946,"url":3731},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":946,"url":3733},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":946,"url":3735},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":946,"url":2404},{"type":946,"url":3738},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":946,"url":3740},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":946,"url":3742},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":946,"url":2406},{"type":946,"url":3745},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":946,"url":3747},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":946,"url":3749},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":946,"url":3751},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1327,1328,1329,1330,1331,1332,1333,1334],{"id":206,"slug":3754,"dossier":47,"summary":3755,"aliases":3756,"sourceIds":3760,"published":3761,"modified":3762,"checkedAt":7,"severity":3763,"references":3766,"versionKeys":3775,"packageCount":32,"repositoryCount":284},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[3757,3758,3759],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[206,3759],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[3764,3765],{"type":936,"score":1111},{"type":939,"score":1595},[3767,3769,3771,3773,3774],{"type":946,"url":3768},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":946,"url":3770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":949,"url":3772},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":954,"url":1323},{"type":946,"url":1603},[1327,1328,1329,1330,1331,1332,1333,1334],{"id":207,"slug":3777,"dossier":47,"summary":3778,"aliases":3779,"sourceIds":3782,"published":3783,"modified":3784,"checkedAt":7,"severity":3785,"references":3787,"versionKeys":3802,"packageCount":32,"repositoryCount":966},"ghsa-wvpp-8hx9-p66j-188b3951","GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution",[3780,3781],"CVE-2026-76220","PYSEC-2026-3843",[207,3781],"2026-08-07T15:49:07Z","2026-09-10T12:26:01.792035310Z",[3786],{"type":936,"score":1040},[3788,3790,3792,3793,3795,3796,3797,3799,3800],{"type":949,"url":3789},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",{"type":946,"url":3791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-76220",{"type":949,"url":1381},{"type":949,"url":3794},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fcommit\u002F96a888f4d782cb2f80452148e48e60ce4af6d541",{"type":954,"url":955},{"type":949,"url":1386},{"type":949,"url":3798},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fgitpython-before-command-execution-via-split-single-char-options",{"type":954,"url":1056},{"type":946,"url":3801},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wvpp-8hx9-p66j",[963,964,965],{"id":208,"slug":3804,"dossier":47,"summary":3805,"aliases":3806,"sourceIds":3808,"published":3809,"modified":3810,"checkedAt":7,"severity":3811,"references":3814,"versionKeys":3826,"packageCount":32,"repositoryCount":103},"ghsa-wwv5-g3v4-889x-b37c7c95","Tornado: Incomplete fix for CVE-2026-35536: cookie attribute injection re-opened via the legacy case-insensitive `**kwargs` path in `set_cookie`",[3807],"CVE-2026-91991",[208],"2026-09-01T20:17:23Z","2026-09-16T03:56:00.367681644Z",[3812],{"type":939,"score":3813},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3815,3817,3818,3820,3822,3824,3825],{"type":949,"url":3816},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-wwv5-g3v4-889x",{"type":949,"url":1953},{"type":949,"url":3819},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fpull\u002F3706",{"type":949,"url":3821},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F6ef836e43e1278530041376adb32504daa977b91",{"type":949,"url":3823},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fda284767eae8e1f0484f123b8c3225f6465b09c7",{"type":954,"url":1212},{"type":949,"url":1960},[1220,1221],{"id":209,"slug":3828,"dossier":47,"summary":3829,"aliases":3830,"sourceIds":3833,"published":3834,"modified":3835,"checkedAt":7,"severity":3836,"references":3840,"versionKeys":3849,"packageCount":32,"repositoryCount":966},"ghsa-x2qx-6953-8485-107f8fe2","GitPython: Unsafe option check validates multi_options before shlex.split transformation",[3831,3832],"CVE-2026-42284","PYSEC-2026-2161",[209,3832],"2026-04-25T23:41:49Z","2026-09-10T03:51:03.787491179Z",[3837,3839],{"type":936,"score":3838},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":936,"score":1013},[3841,3843,3845,3846,3847],{"type":943,"url":3842},"https:\u002F\u002Fgithub.com\u002Fgitpython-developers\u002FGitPython\u002Fsecurity\u002Fadvisories\u002FGHSA-x2qx-6953-8485",{"type":946,"url":3844},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42284",{"type":954,"url":955},{"type":985,"url":3440},{"type":949,"url":3848},"https:\u002F\u002Fwww.tenable.com\u002Fcve\u002FCVE-2026-32686",[963,964,965],{"id":210,"slug":3851,"dossier":47,"summary":3852,"aliases":3853,"sourceIds":3857,"published":3858,"modified":3859,"checkedAt":7,"severity":3860,"references":3865,"versionKeys":3881,"packageCount":32,"repositoryCount":103},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[3854,3855,3856],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[210],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[3861,3863],{"type":936,"score":3862},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":939,"score":3864},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3866,3868,3870,3872,3874,3875,3877,3879],{"type":946,"url":3867},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":949,"url":3869},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":949,"url":3871},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":949,"url":3873},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":954,"url":1123},{"type":949,"url":3876},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":949,"url":3878},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":949,"url":3880},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1135,1136],{"id":211,"slug":3883,"dossier":47,"summary":3884,"aliases":3885,"sourceIds":3889,"published":3890,"modified":3891,"checkedAt":7,"severity":3892,"references":3894,"versionKeys":3908,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[3886,3887,3888],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[211,3888],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[3893],{"type":936,"score":1749},[3895,3897,3899,3901,3903,3905,3906],{"type":946,"url":3896},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":946,"url":3898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":949,"url":3900},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":985,"url":3902},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":949,"url":3904},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":954,"url":1323},{"type":949,"url":3907},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1330],{"id":212,"slug":3910,"dossier":90,"summary":3911,"aliases":3912,"sourceIds":3916,"published":3917,"modified":3918,"checkedAt":7,"severity":3919,"references":3922,"versionKeys":3933,"packageCount":32,"repositoryCount":1336},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[3913,3914,3915],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[212,3915],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[3920],{"type":936,"score":3921},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3923,3925,3927,3929,3931,3932],{"type":943,"url":3924},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":946,"url":3926},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":985,"url":3928},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":985,"url":3930},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":954,"url":1323},{"type":946,"url":1652},[1327,1328,1329,1330,1331,1332,1333,1334,1335],{"id":213,"slug":3935,"dossier":47,"summary":83,"aliases":3936,"sourceIds":3939,"published":3940,"modified":3941,"checkedAt":7,"severity":3942,"references":3945,"versionKeys":3954,"packageCount":32,"repositoryCount":32},"pysec-2025-112-653e8a7c",[3937,3938],"CVE-2025-64429","GHSA-vmp8-hg63-v2hp",[213],"2025-11-12T22:15:49.813Z","2026-05-20T09:18:59.601738Z",[3943],{"type":936,"score":3944},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3946,3948,3950,3952],{"type":949,"url":3947},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fblob\u002F029a5b87ff5b1cd22f7f9717d48cd8830d00807c\u002Fsrc\u002Fcommon\u002Frandom_engine.cpp#L20",{"type":946,"url":3949},"https:\u002F\u002Fduckdb.org\u002F2025\u002F09\u002F16\u002Fannouncing-duckdb-140.html",{"type":946,"url":3951},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fsecurity\u002Fadvisories\u002FGHSA-vmp8-hg63-v2hp",{"type":985,"url":3953},"https:\u002F\u002Fgithub.com\u002Fduckdb\u002Fduckdb\u002Fpull\u002F17275",[3955],"pypi:duckdb@1.4.1",{"id":214,"slug":3957,"dossier":47,"summary":83,"aliases":3958,"sourceIds":3961,"published":3962,"modified":3963,"checkedAt":7,"severity":3964,"references":3966,"versionKeys":3975,"packageCount":32,"repositoryCount":103},"pysec-2025-198-62b25ed4",[3959,3960],"BIT-pytorch-2025-46148","CVE-2025-46148",[214],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[3965],{"type":936,"score":3236},[3967,3969,3971,3973],{"type":946,"url":3968},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":946,"url":3970},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1116,"url":3972},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":985,"url":3974},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1135,1136],{"id":215,"slug":3977,"dossier":47,"summary":83,"aliases":3978,"sourceIds":3981,"published":3982,"modified":3983,"checkedAt":7,"severity":3984,"references":3986,"versionKeys":3992,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[3979,3980],"BIT-pytorch-2025-46149","CVE-2025-46149",[215],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[3985],{"type":936,"score":3236},[3987,3988,3990],{"type":946,"url":3968},{"type":1116,"url":3989},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":985,"url":3991},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1136],{"id":216,"slug":3994,"dossier":47,"summary":83,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4003,"versionKeys":4011,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[3996,3997],"BIT-pytorch-2025-46150","CVE-2025-46150",[216],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[4002],{"type":936,"score":3236},[4004,4005,4007,4009],{"type":946,"url":3968},{"type":1116,"url":4006},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1116,"url":4008},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":985,"url":4010},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1136],{"id":217,"slug":4013,"dossier":47,"summary":83,"aliases":4014,"sourceIds":4017,"published":4018,"modified":4019,"checkedAt":7,"severity":4020,"references":4022,"versionKeys":4028,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[4015,4016],"BIT-pytorch-2025-46152","CVE-2025-46152",[217],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[4021],{"type":936,"score":1201},[4023,4024,4026],{"type":946,"url":3968},{"type":1116,"url":4025},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":985,"url":4027},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1136],{"id":218,"slug":4030,"dossier":47,"summary":83,"aliases":4031,"sourceIds":4034,"published":4035,"modified":4036,"checkedAt":7,"severity":4037,"references":4039,"versionKeys":4049,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[4032,4033],"BIT-pytorch-2025-46153","CVE-2025-46153",[218],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[4038],{"type":936,"score":3236},[4040,4042,4043,4045,4047],{"type":949,"url":4041},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":946,"url":3968},{"type":946,"url":4044},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1116,"url":4046},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":985,"url":4048},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1136],{"id":219,"slug":4051,"dossier":47,"summary":83,"aliases":4052,"sourceIds":4055,"published":4056,"modified":4057,"checkedAt":7,"severity":4058,"references":4060,"versionKeys":4065,"packageCount":32,"repositoryCount":66},"pysec-2025-203-2febb201",[4053,4054],"BIT-pytorch-2025-55551","CVE-2025-55551",[219],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[4059],{"type":936,"score":1149},[4061,4063],{"type":946,"url":4062},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1116,"url":4064},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1135,1136,1137,1999,2000,3278],{"id":220,"slug":4067,"dossier":47,"summary":83,"aliases":4068,"sourceIds":4071,"published":4072,"modified":4073,"checkedAt":7,"severity":4074,"references":4076,"versionKeys":4080,"packageCount":32,"repositoryCount":66},"pysec-2025-204-cdae47da",[4069,4070],"BIT-pytorch-2025-55552","CVE-2025-55552",[220],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[4075],{"type":936,"score":1149},[4077,4078],{"type":946,"url":4062},{"type":1116,"url":4079},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1135,1136,1137,1999,2000,3278],{"id":221,"slug":4082,"dossier":47,"summary":83,"aliases":4083,"sourceIds":4086,"published":4087,"modified":4088,"checkedAt":7,"severity":4089,"references":4091,"versionKeys":4097,"packageCount":32,"repositoryCount":315},"pysec-2025-205-fd5e58fd",[4084,4085],"BIT-pytorch-2025-55553","CVE-2025-55553",[221],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[4090],{"type":936,"score":1149},[4092,4093,4095],{"type":946,"url":4062},{"type":1116,"url":4094},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":985,"url":4096},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1135,1136,1137],{"id":222,"slug":4099,"dossier":47,"summary":83,"aliases":4100,"sourceIds":4103,"published":4104,"modified":4105,"checkedAt":7,"severity":4106,"references":4108,"versionKeys":4112,"packageCount":32,"repositoryCount":66},"pysec-2025-206-58322476",[4101,4102],"BIT-pytorch-2025-55554","CVE-2025-55554",[222],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[4107],{"type":936,"score":1201},[4109,4110],{"type":946,"url":4062},{"type":1116,"url":4111},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1135,1136,1137,1999,2000,3278],{"id":223,"slug":4114,"dossier":47,"summary":83,"aliases":4115,"sourceIds":4118,"published":4119,"modified":4120,"checkedAt":7,"severity":4121,"references":4123,"versionKeys":4129,"packageCount":32,"repositoryCount":315},"pysec-2025-207-2abef3fc",[4116,4117],"BIT-pytorch-2025-55557","CVE-2025-55557",[223],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[4122],{"type":936,"score":1149},[4124,4125,4127],{"type":946,"url":4062},{"type":1116,"url":4126},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":985,"url":4128},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1135,1136,1137],{"id":224,"slug":4131,"dossier":47,"summary":83,"aliases":4132,"sourceIds":4135,"published":4136,"modified":4137,"checkedAt":7,"severity":4138,"references":4140,"versionKeys":4146,"packageCount":32,"repositoryCount":315},"pysec-2025-208-6e93fe9d",[4133,4134],"BIT-pytorch-2025-55558","CVE-2025-55558",[224],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[4139],{"type":936,"score":1149},[4141,4142,4144],{"type":946,"url":4062},{"type":1116,"url":4143},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":985,"url":4145},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1135,1136,1137],{"id":225,"slug":4148,"dossier":47,"summary":83,"aliases":4149,"sourceIds":4152,"published":4153,"modified":4154,"checkedAt":7,"severity":4155,"references":4157,"versionKeys":4163,"packageCount":32,"repositoryCount":315},"pysec-2025-209-e6f352b0",[4150,4151],"BIT-pytorch-2025-55560","CVE-2025-55560",[225],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[4156],{"type":936,"score":1149},[4158,4159,4161],{"type":946,"url":4062},{"type":1116,"url":4160},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":985,"url":4162},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1135,1136,1137],{"id":226,"slug":4165,"dossier":47,"summary":83,"aliases":4166,"sourceIds":4169,"published":4170,"modified":4171,"checkedAt":7,"severity":4172,"references":4174,"versionKeys":4185,"packageCount":32,"repositoryCount":4186},"pysec-2026-139-96951ff6",[4167,4168],"BIT-pytorch-2026-4538","CVE-2026-4538",[226],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[4173],{"type":936,"score":1776},[4175,4177,4179,4181,4183],{"type":949,"url":4176},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":946,"url":4178},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":946,"url":4180},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1116,"url":4182},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":985,"url":4184},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[3473,1135,1136,1137,1999,2000,3278,3279,3280,3281],14,{"id":227,"slug":4188,"dossier":90,"summary":83,"aliases":4189,"sourceIds":4192,"published":4193,"modified":4194,"checkedAt":7,"severity":4195,"references":4198,"versionKeys":4213,"packageCount":32,"repositoryCount":1336},"pysec-2026-2132-627bf7c7",[4190,4191],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[227],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[4196],{"type":936,"score":4197},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[4199,4201,4203,4205,4207,4209,4211],{"type":949,"url":4200},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":949,"url":4202},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":946,"url":4204},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":946,"url":4206},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1116,"url":4208},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":985,"url":4210},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":943,"url":4212},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[4214,4215,4216,4217,4218,4219],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":228,"slug":4221,"dossier":47,"summary":83,"aliases":4222,"sourceIds":4227,"published":4228,"modified":4229,"checkedAt":7,"severity":4230,"references":4232,"versionKeys":4249,"packageCount":32,"repositoryCount":1888},"pysec-2026-2286-8795b007",[4223,4224,4225,4226],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[228],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[4231],{"type":936,"score":937},[4233,4235,4237,4239,4241,4243,4245,4247],{"type":949,"url":4234},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":949,"url":4236},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":946,"url":4238},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":946,"url":4240},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":946,"url":4242},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1116,"url":4244},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1116,"url":4246},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":985,"url":4248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1135,1136,1137,1999,2000,3278,3279,3280,3281],1790829722100]