[{"data":1,"prerenderedAt":8508},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-13669":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":77,"entity":78,"evidence":359,"related":367},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-11-15T08:34:11.365Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-11-15T08:32:06.031Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.29.0","2026-09-16T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},49,48,1,29,6,33,45,47,46,0,5086,5074,12,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":71,"topPackage":72},2871,51,9941,11,63,2832,39,1120,43,{"id":73,"slug":74,"label":75,"repositoryCount":33,"repositoryShare":76},"package:pypi:typing-extensions","typing-extensions-87d153eb","typing-extensions",0.5918367346938775,"repository",{"id":79,"slug":80,"gitlabProjectId":81,"name":82,"pathWithNamespace":83,"description":84,"webUrl":85,"commitSha":86,"commitUrl":87,"lastActivityAt":88,"headCommittedAt":89,"tree":90,"files":93,"resolvedComponentCount":102,"artifactResolvedComponentCount":101,"exactManifestPinCount":103,"packageCount":104,"ecosystems":105,"aiPackageCount":34,"licenseExpressionCount":107,"unknownLicensePackageCount":108,"advisoryIds":109,"advisoryCount":354,"providers":355},"opencode:13669","opencode-13669",13669,"sprache2text+meer - Transkription für Jugendamt Verwaltung","sh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain","aTrain transkribiert Sprachaufnahmen KI-gestützt und vollständig lokal, ohne Daten ins Internet zu übertragen. Im Projekt sprache2text+mehr wird die Software für die Anforderungen der Jugendhilfe optimiert und in die IT-Systeme der Stadt Kiel eingebunden, um Arbeitsabläufe zu vereinfachen und Dokumentationszeiten zu verkürzen.\n\n**Dies hier ist nur ein Mirror.**\n\nDie Entwicklung\u002FCommunity Betreuung findet im [Upstream-Repo](https:\u002F\u002Fgithub.com\u002FaTrainTranscription\u002FaTrain) statt. Bitte wenden Sie sich bei Fragen zur Software an die Entwickelnden dort.\n\nDie Weiterentwicklung dieser Software wurde im Rahmen des Landesprogramm Offene Innovation 2025 finanziert.","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain","ea8a7057857220b4299c0ba0b2aaf6def2f35b87","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fcommit\u002Fea8a7057857220b4299c0ba0b2aaf6def2f35b87","2026-11-14T01:07:30.401Z","2026-11-13T16:02:55.000Z",{"complete":91,"entryCount":92,"truncated":47},true,250,[94],{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},"uv-lock","947a2c691d6f8be1e34d18f292b8c5f0fbc5ac95","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fblob\u002Fea8a7057857220b4299c0ba0b2aaf6def2f35b87\u002Fuv.lock","1da651709584b4d2b50ab044e77786ba026536343299e6572990ead0829c6375",949077,"parsed",203,206,3,202,[106],"pypi",26,9,[110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353],"GHSA-22hg-r758-rrw9","GHSA-248v-346w-9cwc","GHSA-24rc-8hj2-v98c","GHSA-254f-3936-288h","GHSA-27h8-gf7j-v5hc","GHSA-27vj-qcqg-25rc","GHSA-29pf-2h5f-8g72","GHSA-29vq-49wr-vm6x","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2g68-c3qc-8985","GHSA-2g87-pp6c-29x5","GHSA-2h4p-vjrc-8xpq","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-332p-7hrc-92wf","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3j72-p6qg-6xp7","GHSA-3wq7-rqq7-wx6j","GHSA-4558-3h8r-v8xp","GHSA-45hq-cxwh-f6vc","GHSA-462x-pgg6-55fp","GHSA-48p4-8xcf-vxj5","GHSA-494j-54xm-rwp3","GHSA-4fvr-rgm6-gqmc","GHSA-4j2p-28q2-5m79","GHSA-4m7w-qmgq-4wj5","GHSA-4rm8-3hmm-39fg","GHSA-4rr5-89j8-mwwm","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xh5-x5gv-qwph","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-54p9-h82j-f925","GHSA-5639-2j2p-m4mx","GHSA-567q-5qvw-pf92","GHSA-58qw-9mgm-455v","GHSA-58r4-6rv3-gfh8","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5p39-cfhj-2xmp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5w7q-77mv-v69f","GHSA-5wr8-gcqf-gqf3","GHSA-5x8w-8jj5-q52h","GHSA-5x94-69rx-g8h2","GHSA-5xm2-6676-qcp9","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63cw-57p8-fm3p","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-654x-cwwv-5j9c","GHSA-65pc-fj4g-8rjx","GHSA-65qm-jvmh-6pqg","GHSA-69f9-5gxw-wvc2","GHSA-69hj-f68j-2879","GHSA-69w3-r845-3855","GHSA-6cjc-53gc-5rqm","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6q48-6c7w-9gw2","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6vgw-5pg2-w6jp","GHSA-74r2-7ff9-mjj2","GHSA-768j-98cg-p3fv","GHSA-78g4-xqwv-q3g8","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7mwm-ghpf-9vrm","GHSA-82r6-8w77-94w6","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-87hc-h4r5-73f7","GHSA-887c-mr87-cxwp","GHSA-8988-9cw3-xx77","GHSA-8g5g-8vmr-9782","GHSA-8mx5-7m5m-r77g","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9v9v-9qvf-h2hj","GHSA-9vhv-jxww-xfm5","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-9xw5-w5jj-pvcg","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c6hw-5grf-ff96","GHSA-cfh3-3jmp-rvhc","GHSA-cgwc-pv48-fhj5","GHSA-cp9v-662q-vvx9","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cwqr-hh33-gh44","GHSA-cx63-2mw6-8hw5","GHSA-f2g6-542v-9j58","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-f9vj-2wh5-fj8j","GHSA-f9xw-jh8m-3mwq","GHSA-fc9g-5qg7-mf45","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-fq56-3cx3-fjxp","GHSA-g3cq-j2xw-wf74","GHSA-g4qv-2jxx-769h","GHSA-g6x2-hccm-hh4m","GHSA-g7cr-3p24-7wf7","GHSA-g7vv-2v7x-gj9p","GHSA-g842-9rc4-69pw","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gg2r-wvfm-q9rx","GHSA-gh4c-6fx4-qh6g","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gx76-c99x-2c96","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgf8-39gv-g3f2","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-j4m9-6w36-pw47","GHSA-j586-36cw-2gc2","GHSA-j8f7-rjxc-mr56","GHSA-jg22-mg44-37j8","GHSA-jg86-v3jv-hrpm","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp4c-xjxw-mgf9","GHSA-jp82-jpqv-5vv3","GHSA-jw8x-6495-233v","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m9gh-vj53-gvh9","GHSA-mf5v-w3w3-f6cg","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq26-g339-26xf","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfp-p49p-3hf2","GHSA-mwh4-6h8g-pg8w","GHSA-p4wg-p73j-c528","GHSA-p8hx-v2p6-rp84","GHSA-p998-jp59-783m","GHSA-pchr-8j38-3x4p","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pqxq-w44r-73xw","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-q45j-58j2-45rg","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qqmf-gpg7-g8gw","GHSA-qwm4-qh6w-59xr","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rfgq-q3w2-pmv2","GHSA-rfpc-qcw5-3pc4","GHSA-rrmf-rvhw-rf47","GHSA-v4x8-3wr5-3wq8","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-v9pv-5gc8-w2m6","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vx6w-vv9f-6gvg","GHSA-vxq7-64xx-v4gw","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-w889-685w-c8fh","GHSA-wf93-45jw-7689","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wqgw-9xfh-qf2g","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-x9r9-c232-4q39","GHSA-xcgm-r5h9-7989","GHSA-xcq7-p3pf-p88h","GHSA-xcvg-w56q-r89m","GHSA-xg8h-j46f-w952","GHSA-xgh8-jp6q-p5x8","GHSA-xj96-63gp-2gmr","GHSA-xmj3-9gf7-h52w","GHSA-xrqw-3rrv-vx5w","GHSA-xvh5-g6gv-559v","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139",244,[356],{"id":357,"label":358},"hugging-face","Hugging Face",{"files":360,"occurrenceCount":102},[361,366],{"path":362,"kind":363,"sourceUrl":364,"commitSha":86,"blobSha":365,"state":100,"componentCount":103},"pyproject.toml","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdigitalhub-sh\u002Flandesprogramm-offene-innovationen\u002FaTrain\u002F-\u002Fblob\u002Fea8a7057857220b4299c0ba0b2aaf6def2f35b87\u002Fpyproject.toml","afd5f5d9bcc3035294b3138dec63ca6290c89802",{"path":56,"kind":95,"blobSha":96,"sourceUrl":97,"commitSha":86,"contentSha256":98,"byteCount":99,"state":100,"componentCount":101},{"packages":368,"vulnerabilities":2194},[369,382,395,405,414,424,433,444,455,465,475,485,494,504,513,523,532,541,550,559,569,577,586,595,604,613,622,631,640,649,658,669,679,688,697,705,715,724,734,743,752,761,770,779,788,797,806,815,824,833,842,852,861,870,879,888,897,906,915,924,933,942,951,960,969,978,987,996,1005,1014,1023,1034,1043,1052,1061,1070,1079,1088,1097,1106,1115,1124,1133,1142,1151,1160,1169,1178,1187,1196,1205,1214,1223,1232,1241,1250,1259,1268,1278,1287,1296,1305,1313,1322,1331,1340,1349,1358,1367,1375,1384,1392,1401,1409,1418,1426,1434,1442,1450,1458,1466,1475,1484,1493,1503,1512,1521,1530,1539,1548,1557,1566,1575,1584,1593,1602,1611,1620,1629,1638,1646,1654,1664,1673,1682,1691,1701,1711,1720,1728,1736,1744,1752,1760,1769,1778,1786,1795,1804,1813,1823,1832,1841,1850,1860,1869,1878,1886,1896,1906,1915,1924,1933,1942,1951,1960,1969,1978,1987,1996,2005,2014,2023,2031,2040,2049,2057,2065,2073,2082,2091,2097,2106,2115,2124,2133,2141,2149,2158,2167,2176,2185],{"id":370,"slug":371,"identity":372,"label":373,"aiRelevant":91,"provider":374,"advisoryCount":375,"licenseExpressions":376,"versions":378,"dossier":91,"occurrenceCount":380,"directOccurrenceCount":32,"evidenceFiles":381},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":357,"label":358},27,[377],"Apache-2.0",[379],"5.22.0",2,[362,56],{"id":383,"slug":384,"identity":385,"label":386,"aiRelevant":91,"provider":387,"advisoryCount":388,"licenseExpressions":389,"versions":391,"dossier":91,"occurrenceCount":380,"directOccurrenceCount":32,"evidenceFiles":394},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[390],"BSD-3-Clause",[392,393],"2.9.1","2.9.1+cu128",[362,56],{"id":396,"slug":397,"identity":398,"label":399,"aiRelevant":91,"provider":387,"advisoryCount":32,"licenseExpressions":400,"versions":402,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":404},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[377,401],"non-standard",[403],"1.15.0",[56],{"id":406,"slug":407,"identity":408,"label":409,"aiRelevant":91,"provider":387,"advisoryCount":32,"licenseExpressions":410,"versions":411,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":413},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[390,401],[412],"1.9.0",[56],{"id":415,"slug":416,"identity":417,"label":418,"aiRelevant":91,"provider":387,"advisoryCount":39,"licenseExpressions":419,"versions":421,"dossier":91,"occurrenceCount":380,"directOccurrenceCount":32,"evidenceFiles":423},"package:pypi:faster-whisper","faster-whisper-edb11692","pypi:faster-whisper","faster-whisper",[420],"MIT",[422],"1.2.1",[362,56],{"id":425,"slug":426,"identity":427,"label":428,"aiRelevant":91,"provider":387,"advisoryCount":39,"licenseExpressions":429,"versions":430,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":432},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[401],[431],"0.23.3",[56],{"id":434,"slug":435,"identity":436,"label":437,"aiRelevant":47,"provider":387,"advisoryCount":67,"licenseExpressions":438,"versions":441,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":443},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",[439,440],"HPND","MIT-CMU",[442],"13.0.0",[56],{"id":445,"slug":446,"identity":447,"label":448,"aiRelevant":47,"provider":387,"advisoryCount":449,"licenseExpressions":450,"versions":452,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":454},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",41,[377,451],"Apache-2.0 AND MIT",[453],"3.14.3",[56],{"id":456,"slug":457,"identity":458,"label":459,"aiRelevant":47,"provider":387,"advisoryCount":66,"licenseExpressions":460,"versions":462,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":464},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",[420,461],"Unlicense",[463],"3.29.4",[56],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":47,"provider":387,"advisoryCount":470,"licenseExpressions":471,"versions":472,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":474},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",10,[420],[473],"2.7.0",[56],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":47,"provider":387,"advisoryCount":480,"licenseExpressions":481,"versions":482,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":484},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[377],[483],"0.0.32",[56],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":47,"provider":387,"advisoryCount":480,"licenseExpressions":490,"versions":491,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":493},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[390],[492],"1.3.1",[56],{"id":495,"slug":496,"identity":497,"label":498,"aiRelevant":47,"provider":387,"advisoryCount":499,"licenseExpressions":500,"versions":501,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":503},"package:pypi:pip","pip-2911c768","pypi:pip","pip",7,[420],[502],"26.1.2",[56],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":47,"provider":387,"advisoryCount":499,"licenseExpressions":509,"versions":510,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":512},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[390,401],[511],"3.1.9",[56],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":47,"provider":387,"advisoryCount":518,"licenseExpressions":519,"versions":520,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":522},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",4,[390,401],[521],"3.1.6",[56],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":47,"provider":387,"advisoryCount":518,"licenseExpressions":528,"versions":529,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":531},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[420],[530],"82.0.1",[56],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":47,"provider":387,"advisoryCount":103,"licenseExpressions":537,"versions":538,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":540},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[420],[539],"1.3.12",[56],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":47,"provider":387,"advisoryCount":103,"licenseExpressions":546,"versions":547,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":549},"package:pypi:requests","requests-53653f76","pypi:requests","requests",[377],[548],"2.34.2",[56],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":555,"versions":556,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":558},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[420],[557],"4.14.2",[56],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":564,"versions":566,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":568},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[565],"MPL-2.0",[567],"2026.10.19",[56],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":574,"versions":575,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":576},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[377],[422],[56],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":582,"versions":583,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":585},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[377],[584],"1.43.0",[56],{"id":587,"slug":588,"identity":589,"label":590,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":591,"versions":592,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":594},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[390],[593],"7.35.1",[56],{"id":596,"slug":597,"identity":598,"label":599,"aiRelevant":47,"provider":387,"advisoryCount":380,"licenseExpressions":600,"versions":601,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":603},"package:pypi:python-engineio","python-engineio-a8408602","pypi:python-engineio","python-engineio",[420],[602],"4.13.3",[56],{"id":605,"slug":606,"identity":607,"label":608,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":609,"versions":610,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":612},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[420],[611],"4.63.0",[56],{"id":614,"slug":615,"identity":616,"label":617,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":618,"versions":619,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":621},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[390],[620],"2026.6.0",[56],{"id":623,"slug":624,"identity":625,"label":626,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":627,"versions":628,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":630},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[420],[629],"0.16.0",[56],{"id":632,"slug":633,"identity":634,"label":635,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":636,"versions":637,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":639},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[390,401],[638],"3.18",[56],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":645,"versions":646,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":648},"package:pypi:lightning","lightning-28a5cccb","pypi:lightning","lightning",[377],[647],"2.6.5",[56],{"id":650,"slug":651,"identity":652,"label":653,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":654,"versions":655,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":657},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[377],[656],"6.9.1",[56],{"id":659,"slug":660,"identity":661,"label":662,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":663,"versions":666,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":668},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[664,665],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[667],"3.11.9",[56],{"id":670,"slug":671,"identity":672,"label":673,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":674,"versions":676,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":678},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[675],"BSD-2-Clause",[677],"2.20.0",[56],{"id":680,"slug":681,"identity":682,"label":683,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":684,"versions":685,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":687},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[390],[686],"1.2.2",[56],{"id":689,"slug":690,"identity":691,"label":692,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":693,"versions":694,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":696},"package:pypi:python-socketio","python-socketio-6960be7a","pypi:python-socketio","python-socketio",[420],[695],"5.16.3",[56],{"id":698,"slug":699,"identity":700,"label":701,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":702,"versions":703,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":704},"package:pypi:pytorch-lightning","pytorch-lightning-1550c03a","pypi:pytorch-lightning","pytorch-lightning",[377],[647],[56],{"id":706,"slug":707,"identity":708,"label":709,"aiRelevant":47,"provider":387,"advisoryCount":32,"licenseExpressions":710,"versions":712,"dossier":91,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":714},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[711],"MIT AND MPL-2.0",[713],"4.68.3",[56],{"id":716,"slug":717,"identity":718,"label":719,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":720,"versions":721,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":723},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[377],[722],"25.1.0",[56],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":729,"versions":731,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":733},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[730],"PSF-2.0",[732],"2.6.2",[56],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":739,"versions":740,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":742},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[377],[741],"1.4.0",[56],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":748,"versions":749,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":751},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[420],[750],"1.18.5",[56],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":757,"versions":758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":760},"package:pypi:annotated-doc","annotated-doc-9568e1af","pypi:annotated-doc","annotated-doc",[420],[759],"0.0.4",[56],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":766,"versions":767,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":769},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[420],[768],"0.7.0",[56],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":775,"versions":776,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":778},"package:pypi:asteroid-filterbanks","asteroid-filterbanks-012ae487","pypi:asteroid-filterbanks","asteroid-filterbanks",[420],[777],"0.4.0",[56],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":784,"versions":785,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":787},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[420],[786],"26.1.0",[56],{"id":789,"slug":790,"identity":791,"label":792,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":793,"versions":794,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":796},"package:pypi:av","av-62c498c6","pypi:av","av",[390],[795],"18.1.0",[56],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":802,"versions":803,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":805},"package:pypi:bandit","bandit-b6566895","pypi:bandit","bandit",[377],[804],"1.9.4",[56],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":811,"versions":812,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":814},"package:pypi:bidict","bidict-d2d69f19","pypi:bidict","bidict",[565],[813],"0.23.1",[56],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":820,"versions":821,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":823},"package:pypi:boolean-py","boolean-py-d2700117","pypi:boolean-py","boolean-py",[675],[822],"5.0",[56],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":829,"versions":830,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":832},"package:pypi:bottle","bottle-d11915f9","pypi:bottle","bottle",[420],[831],"0.13.4",[56],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":838,"versions":839,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":841},"package:pypi:cachecontrol","cachecontrol-f48df14f","pypi:cachecontrol","cachecontrol",[377,401],[840],"0.14.4",[56],{"id":843,"slug":844,"identity":845,"label":846,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":847,"versions":849,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":851},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[420,848],"MIT-0",[850],"2.0.0",[56],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":857,"versions":858,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":860},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[420],[859],"3.4.7",[56],{"id":862,"slug":863,"identity":864,"label":865,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":866,"versions":867,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":869},"package:pypi:click","click-ef97f731","pypi:click","click",[390,401],[868],"8.4.2",[56],{"id":871,"slug":872,"identity":873,"label":874,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":875,"versions":876,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":878},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[390],[877],"3.1.2",[56],{"id":880,"slug":881,"identity":882,"label":883,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":884,"versions":885,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":887},"package:pypi:clr-loader","clr-loader-839f2a74","pypi:clr-loader","clr-loader",[],[886],"0.3.1",[56],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":893,"versions":894,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":896},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[401],[895],"0.4.6",[56],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":902,"versions":903,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":905},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[420],[904],"6.10.1",[56],{"id":907,"slug":908,"identity":909,"label":910,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":911,"versions":912,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":914},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[390],[913],"1.3.3",[56],{"id":916,"slug":917,"identity":918,"label":919,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":920,"versions":921,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":923},"package:pypi:crisperwhisper","crisperwhisper-d3b6821a","pypi:crisperwhisper","crisperwhisper",[420],[922],"2.0.3",[56],{"id":925,"slug":926,"identity":927,"label":928,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":929,"versions":930,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":932},"package:pypi:ctranslate2","ctranslate2-bb8ef47b","pypi:ctranslate2","ctranslate2",[420],[931],"4.8.0",[56],{"id":934,"slug":935,"identity":936,"label":937,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":938,"versions":939,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":941},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[390],[940],"0.12.1",[56],{"id":943,"slug":944,"identity":945,"label":946,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":947,"versions":948,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":950},"package:pypi:cyclonedx-python-lib","cyclonedx-python-lib-af6d232b","pypi:cyclonedx-python-lib","cyclonedx-python-lib",[377],[949],"11.11.0",[56],{"id":952,"slug":953,"identity":954,"label":955,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":956,"versions":957,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":959},"package:pypi:dask","dask-c6d8c0b4","pypi:dask","dask",[390],[958],"2026.8.0",[56],{"id":961,"slug":962,"identity":963,"label":964,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":965,"versions":966,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":968},"package:pypi:defusedxml","defusedxml-fab5db42","pypi:defusedxml","defusedxml",[401],[967],"0.7.1",[56],{"id":970,"slug":971,"identity":972,"label":973,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":974,"versions":975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":977},"package:pypi:docutils","docutils-cc2f8622","pypi:docutils","docutils",[401],[976],"0.23",[56],{"id":979,"slug":980,"identity":981,"label":982,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":983,"versions":984,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":986},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[420],[985],"0.8.2",[56],{"id":988,"slug":989,"identity":990,"label":991,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":992,"versions":993,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":995},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[420],[994],"0.138.2",[56],{"id":997,"slug":998,"identity":999,"label":1000,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1001,"versions":1002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1004},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[377],[1003],"25.12.19",[56],{"id":1006,"slug":1007,"identity":1008,"label":1009,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1010,"versions":1011,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1013},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[377],[1012],"1.8.0",[56],{"id":1015,"slug":1016,"identity":1017,"label":1018,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1019,"versions":1020,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1022},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[377],[1021],"1.75.0",[56],{"id":1024,"slug":1025,"identity":1026,"label":1027,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1028,"versions":1031,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1033},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[420,1029,1030],"MIT AND PSF-2.0","MIT AND Python-2.0",[1032],"3.5.3",[56],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1039,"versions":1040,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1042},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[377],[1041],"1.81.1",[56],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1048,"versions":1049,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1051},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[377],[1050],"1.6.0",[56],{"id":1053,"slug":1054,"identity":1055,"label":1056,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1057,"versions":1058,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1060},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[390],[1059],"1.0.9",[56],{"id":1062,"slug":1063,"identity":1064,"label":1065,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1066,"versions":1067,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1069},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[420],[1068],"0.8.0",[56],{"id":1071,"slug":1072,"identity":1073,"label":1074,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1075,"versions":1076,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1078},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[390],[1077],"0.28.1",[56],{"id":1080,"slug":1081,"identity":1082,"label":1083,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1084,"versions":1085,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1087},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[377],[1086],"1.33.0",[56],{"id":1089,"slug":1090,"identity":1091,"label":1092,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1093,"versions":1094,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1096},"package:pypi:ifaddr","ifaddr-814125b6","pypi:ifaddr","ifaddr",[420],[1095],"0.2.0",[56],{"id":1098,"slug":1099,"identity":1100,"label":1101,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1102,"versions":1103,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1105},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[377,401],[1104],"9.0.0",[56],{"id":1107,"slug":1108,"identity":1109,"label":1110,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1111,"versions":1112,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1114},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[390,401],[1113],"2.2.0",[56],{"id":1116,"slug":1117,"identity":1118,"label":1119,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1120,"versions":1121,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1123},"package:pypi:jeepney","jeepney-898410ff","pypi:jeepney","jeepney",[420],[1122],"0.9.0",[56],{"id":1125,"slug":1126,"identity":1127,"label":1128,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1129,"versions":1130,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1132},"package:pypi:jiwer","jiwer-722f6674","pypi:jiwer","jiwer",[377],[1131],"4.0.0",[56],{"id":1134,"slug":1135,"identity":1136,"label":1137,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1138,"versions":1139,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1141},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[390],[1140],"1.5.3",[56],{"id":1143,"slug":1144,"identity":1145,"label":1146,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1147,"versions":1148,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1150},"package:pypi:julius","julius-2c17d8d2","pypi:julius","julius",[420],[1149],"0.2.8",[56],{"id":1152,"slug":1153,"identity":1154,"label":1155,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1156,"versions":1157,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1159},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[401],[1158],"1.5.0",[56],{"id":1161,"slug":1162,"identity":1163,"label":1164,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1165,"versions":1166,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1168},"package:pypi:license-expression","license-expression-66cbb677","pypi:license-expression","license-expression",[377],[1167],"30.4.4",[56],{"id":1170,"slug":1171,"identity":1172,"label":1173,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1174,"versions":1175,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1177},"package:pypi:lightning-utilities","lightning-utilities-46646cd2","pypi:lightning-utilities","lightning-utilities",[377],[1176],"0.15.3",[56],{"id":1179,"slug":1180,"identity":1181,"label":1182,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1183,"versions":1184,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1186},"package:pypi:locket","locket-f0905b94","pypi:locket","locket",[675],[1185],"1.0.0",[56],{"id":1188,"slug":1189,"identity":1190,"label":1191,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1192,"versions":1193,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1195},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[420],[1194],"4.2.0",[56],{"id":1197,"slug":1198,"identity":1199,"label":1200,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1201,"versions":1202,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1204},"package:pypi:markdown2","markdown2-6999cefd","pypi:markdown2","markdown2",[420],[1203],"2.5.5",[56],{"id":1206,"slug":1207,"identity":1208,"label":1209,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1210,"versions":1211,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1213},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[390],[1212],"3.0.3",[56],{"id":1215,"slug":1216,"identity":1217,"label":1218,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1219,"versions":1220,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1222},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[401],[1221],"3.11.0",[56],{"id":1224,"slug":1225,"identity":1226,"label":1227,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1228,"versions":1229,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1231},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[420],[1230],"0.1.2",[56],{"id":1233,"slug":1234,"identity":1235,"label":1236,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1237,"versions":1238,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1240},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[390],[1239],"1.3.0",[56],{"id":1242,"slug":1243,"identity":1244,"label":1245,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1246,"versions":1247,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1249},"package:pypi:narwhals","narwhals-24e2f721","pypi:narwhals","narwhals",[420],[1248],"2.22.1",[56],{"id":1251,"slug":1252,"identity":1253,"label":1254,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1255,"versions":1256,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1258},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[390,401],[1257],"3.6.1",[56],{"id":1260,"slug":1261,"identity":1262,"label":1263,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1264,"versions":1265,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1267},"package:pypi:nicegui","nicegui-0dcd6652","pypi:nicegui","nicegui",[420],[1266],"3.18.0",[56],{"id":1269,"slug":1270,"identity":1271,"label":1272,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1273,"versions":1275,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1277},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1274,401],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1276],"2.4.6",[56],{"id":1279,"slug":1280,"identity":1281,"label":1282,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1283,"versions":1284,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1286},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[401],[1285],"12.8.4.1",[56],{"id":1288,"slug":1289,"identity":1290,"label":1291,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1292,"versions":1293,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1295},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[401],[1294],"12.8.90",[56],{"id":1297,"slug":1298,"identity":1299,"label":1300,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1301,"versions":1302,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1304},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[401],[1303],"12.8.93",[56],{"id":1306,"slug":1307,"identity":1308,"label":1309,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1310,"versions":1311,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1312},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[401],[1294],[56],{"id":1314,"slug":1315,"identity":1316,"label":1317,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1318,"versions":1319,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1321},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[401],[1320],"9.10.2.21",[56],{"id":1323,"slug":1324,"identity":1325,"label":1326,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1327,"versions":1328,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1330},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[401],[1329],"11.3.3.83",[56],{"id":1332,"slug":1333,"identity":1334,"label":1335,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1336,"versions":1337,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1339},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[401],[1338],"1.13.1.3",[56],{"id":1341,"slug":1342,"identity":1343,"label":1344,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1345,"versions":1346,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1348},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[401],[1347],"10.3.9.90",[56],{"id":1350,"slug":1351,"identity":1352,"label":1353,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1354,"versions":1355,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1357},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[401],[1356],"11.7.3.90",[56],{"id":1359,"slug":1360,"identity":1361,"label":1362,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1363,"versions":1364,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1366},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[401],[1365],"12.5.8.93",[56],{"id":1368,"slug":1369,"identity":1370,"label":1371,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1372,"versions":1373,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1374},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[401],[967],[56],{"id":1376,"slug":1377,"identity":1378,"label":1379,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1380,"versions":1381,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1383},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[390],[1382],"2.27.5",[56],{"id":1385,"slug":1386,"identity":1387,"label":1388,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1389,"versions":1390,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1391},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[401],[1303],[56],{"id":1393,"slug":1394,"identity":1395,"label":1396,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1397,"versions":1398,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1400},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[390,401],[1399],"3.3.20",[56],{"id":1402,"slug":1403,"identity":1404,"label":1405,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1406,"versions":1407,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1408},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[377,401],[1294],[56],{"id":1410,"slug":1411,"identity":1412,"label":1413,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1414,"versions":1415,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1417},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[420],[1416],"1.27.0",[56],{"id":1419,"slug":1420,"identity":1421,"label":1422,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1423,"versions":1424,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1425},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[377],[584],[56],{"id":1427,"slug":1428,"identity":1429,"label":1430,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1431,"versions":1432,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1433},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[377],[584],[56],{"id":1435,"slug":1436,"identity":1437,"label":1438,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1439,"versions":1440,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1441},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[377],[584],[56],{"id":1443,"slug":1444,"identity":1445,"label":1446,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1447,"versions":1448,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1449},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[377],[584],[56],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1455,"versions":1456,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1457},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[377],[584],[56],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1463,"versions":1464,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1465},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[377],[584],[56],{"id":1467,"slug":1468,"identity":1469,"label":1470,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1471,"versions":1472,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1474},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[377],[1473],"0.64b0",[56],{"id":1476,"slug":1477,"identity":1478,"label":1479,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1480,"versions":1481,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1483},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[420],[1482],"4.9.0",[56],{"id":1485,"slug":1486,"identity":1487,"label":1488,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1489,"versions":1490,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1492},"package:pypi:packageurl-python","packageurl-python-dc3afccd","pypi:packageurl-python","packageurl-python",[420],[1491],"0.17.6",[56],{"id":1494,"slug":1495,"identity":1496,"label":1497,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1498,"versions":1500,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1502},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1499,401],"Apache-2.0 OR BSD-2-Clause",[1501],"26.2",[56],{"id":1504,"slug":1505,"identity":1506,"label":1507,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1508,"versions":1509,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1511},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[390,401],[1510],"3.1.0",[56],{"id":1513,"slug":1514,"identity":1515,"label":1516,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1517,"versions":1518,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1520},"package:pypi:partd","partd-64327513","pypi:partd","partd",[390],[1519],"1.4.2",[56],{"id":1522,"slug":1523,"identity":1524,"label":1525,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1526,"versions":1527,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1529},"package:pypi:pip-api","pip-api-5919fa1d","pypi:pip-api","pip-api",[377],[1528],"0.0.34",[56],{"id":1531,"slug":1532,"identity":1533,"label":1534,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1535,"versions":1536,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1538},"package:pypi:pip-audit","pip-audit-8a38ba34","pypi:pip-audit","pip-audit",[401],[1537],"2.10.1",[56],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1544,"versions":1545,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1547},"package:pypi:pip-requirements-parser","pip-requirements-parser-3a4c3c44","pypi:pip-requirements-parser","pip-requirements-parser",[420],[1546],"32.0.1",[56],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1553,"versions":1554,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1556},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[420],[1555],"4.14.0",[56],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1562,"versions":1563,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1565},"package:pypi:primepy","primepy-a6cda261","pypi:primepy","primepy",[420],[1564],"1.3",[56],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1571,"versions":1572,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1574},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[377],[1573],"0.5.2",[56],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1580,"versions":1581,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1583},"package:pypi:proxy-tools","proxy-tools-e07ef332","pypi:proxy-tools","proxy-tools",[420],[1582],"0.1.0",[56],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1589,"versions":1590,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1592},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[390],[1591],"7.2.2",[56],{"id":1594,"slug":1595,"identity":1596,"label":1597,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1598,"versions":1599,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1601},"package:pypi:py-serializable","py-serializable-cebfca90","pypi:py-serializable","py-serializable",[377],[1600],"2.1.0",[56],{"id":1603,"slug":1604,"identity":1605,"label":1606,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1607,"versions":1608,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1610},"package:pypi:pyannote-audio","pyannote-audio-3ee3db31","pypi:pyannote-audio","pyannote-audio",[],[1609],"4.0.7",[56],{"id":1612,"slug":1613,"identity":1614,"label":1615,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1616,"versions":1617,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1619},"package:pypi:pyannote-core","pyannote-core-38057ad5","pypi:pyannote-core","pyannote-core",[],[1618],"6.0.1",[56],{"id":1621,"slug":1622,"identity":1623,"label":1624,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1625,"versions":1626,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1628},"package:pypi:pyannote-database","pyannote-database-ba711eec","pypi:pyannote-database","pyannote-database",[],[1627],"6.1.1",[56],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1634,"versions":1635,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1637},"package:pypi:pyannote-metrics","pyannote-metrics-089b5533","pypi:pyannote-metrics","pyannote-metrics",[],[1636],"4.1",[56],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1643,"versions":1644,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1645},"package:pypi:pyannote-pipeline","pyannote-pipeline-502241b6","pypi:pyannote-pipeline","pyannote-pipeline",[],[1131],[56],{"id":1647,"slug":1648,"identity":1649,"label":1650,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1651,"versions":1652,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1653},"package:pypi:pyannoteai-sdk","pyannoteai-sdk-93f4a941","pypi:pyannoteai-sdk","pyannoteai-sdk",[],[777],[56],{"id":1655,"slug":1656,"identity":1657,"label":1658,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1659,"versions":1661,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1663},"package:pypi:pycairo","pycairo-dec4e123","pypi:pycairo","pycairo",[1660],"LGPL-2.1-only OR MPL-1.1",[1662],"1.29.0",[56],{"id":1665,"slug":1666,"identity":1667,"label":1668,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1669,"versions":1670,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1672},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[390],[1671],"3.0",[56],{"id":1674,"slug":1675,"identity":1676,"label":1677,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1678,"versions":1679,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1681},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[420],[1680],"2.13.4",[56],{"id":1683,"slug":1684,"identity":1685,"label":1686,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1687,"versions":1688,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1690},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[420],[1689],"2.46.4",[56],{"id":1692,"slug":1693,"identity":1694,"label":1695,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1696,"versions":1698,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1700},"package:pypi:pygobject","pygobject-b7331567","pypi:pygobject","pygobject",[1697],"LGPL-2.0-or-later",[1699],"3.50.0",[56],{"id":1702,"slug":1703,"identity":1704,"label":1705,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1706,"versions":1708,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1710},"package:pypi:pygobject-stubs","pygobject-stubs-770d6f2f","pypi:pygobject-stubs","pygobject-stubs",[1707],"LGPL-2.1",[1709],"2.16.0",[56],{"id":1712,"slug":1713,"identity":1714,"label":1715,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1716,"versions":1717,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1719},"package:pypi:pyobjc-core","pyobjc-core-adc05bb4","pypi:pyobjc-core","pyobjc-core",[420],[1718],"12.2.1",[56],{"id":1721,"slug":1722,"identity":1723,"label":1724,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1725,"versions":1726,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1727},"package:pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa-8e347170","pypi:pyobjc-framework-cocoa","pyobjc-framework-cocoa",[420],[1718],[56],{"id":1729,"slug":1730,"identity":1731,"label":1732,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1733,"versions":1734,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1735},"package:pypi:pyobjc-framework-quartz","pyobjc-framework-quartz-6a98fc9b","pypi:pyobjc-framework-quartz","pyobjc-framework-quartz",[420],[1718],[56],{"id":1737,"slug":1738,"identity":1739,"label":1740,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1741,"versions":1742,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1743},"package:pypi:pyobjc-framework-security","pyobjc-framework-security-fe9a4ff0","pypi:pyobjc-framework-security","pyobjc-framework-security",[420],[1718],[56],{"id":1745,"slug":1746,"identity":1747,"label":1748,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1749,"versions":1750,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1751},"package:pypi:pyobjc-framework-uniformtypeidentifiers","pyobjc-framework-uniformtypeidentifiers-cf1b4c2f","pypi:pyobjc-framework-uniformtypeidentifiers","pyobjc-framework-uniformtypeidentifiers",[420],[1718],[56],{"id":1753,"slug":1754,"identity":1755,"label":1756,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1757,"versions":1758,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1759},"package:pypi:pyobjc-framework-webkit","pyobjc-framework-webkit-112152ab","pypi:pyobjc-framework-webkit","pyobjc-framework-webkit",[420],[1718],[56],{"id":1761,"slug":1762,"identity":1763,"label":1764,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1765,"versions":1766,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1768},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[420],[1767],"3.3.2",[56],{"id":1770,"slug":1771,"identity":1772,"label":1773,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1774,"versions":1775,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1777},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[401],[1776],"2.9.0.post0",[56],{"id":1779,"slug":1780,"identity":1781,"label":1782,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1783,"versions":1784,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1785},"package:pypi:pythonnet","pythonnet-7ea68ab2","pypi:pythonnet","pythonnet",[420],[1510],[56],{"id":1787,"slug":1788,"identity":1789,"label":1790,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1791,"versions":1792,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1794},"package:pypi:pytorch-metric-learning","pytorch-metric-learning-389f0864","pypi:pytorch-metric-learning","pytorch-metric-learning",[420],[1793],"2.9.0",[56],{"id":1796,"slug":1797,"identity":1798,"label":1799,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1800,"versions":1801,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1803},"package:pypi:pywebview","pywebview-e9c71fb3","pypi:pywebview","pywebview",[390],[1802],"6.2.1",[56],{"id":1805,"slug":1806,"identity":1807,"label":1808,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1809,"versions":1810,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1812},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[1811],"312",[56],{"id":1814,"slug":1815,"identity":1816,"label":1817,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1818,"versions":1820,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1822},"package:pypi:pyxdg","pyxdg-cb4a8913","pypi:pyxdg","pyxdg",[1819,1697],"LGPL-2.0",[1821],"0.28",[56],{"id":1824,"slug":1825,"identity":1826,"label":1827,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1828,"versions":1829,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1831},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[420],[1830],"6.0.3",[56],{"id":1833,"slug":1834,"identity":1835,"label":1836,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1837,"versions":1838,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1840},"package:pypi:qtpy","qtpy-44054c99","pypi:qtpy","qtpy",[420],[1839],"2.4.3",[56],{"id":1842,"slug":1843,"identity":1844,"label":1845,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1846,"versions":1847,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1849},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[420],[1848],"3.14.5",[56],{"id":1851,"slug":1852,"identity":1853,"label":1854,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1855,"versions":1857,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1859},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[377,1856],"Apache-2.0 AND CNRI-Python",[1858],"2026.9.10",[56],{"id":1861,"slug":1862,"identity":1863,"label":1864,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1865,"versions":1866,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1868},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[420],[1867],"15.0.0",[56],{"id":1870,"slug":1871,"identity":1872,"label":1873,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1874,"versions":1875,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1877},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[420],[1876],"0.17.3",[56],{"id":1879,"slug":1880,"identity":1881,"label":1882,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1883,"versions":1884,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1885},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[401],[1068],[56],{"id":1887,"slug":1888,"identity":1889,"label":1890,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1891,"versions":1892,"dossier":47,"occurrenceCount":380,"directOccurrenceCount":39,"evidenceFiles":1895},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[401],[1893,1894],"1.17.1","1.18.0",[56],{"id":1897,"slug":1898,"identity":1899,"label":1900,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1901,"versions":1903,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1905},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[1902],"ISC",[1904],"1.5.4",[56],{"id":1907,"slug":1908,"identity":1909,"label":1910,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1911,"versions":1912,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1914},"package:pypi:show-in-file-manager","show-in-file-manager-cc1246db","pypi:show-in-file-manager","show-in-file-manager",[420],[1913],"1.1.6",[56],{"id":1916,"slug":1917,"identity":1918,"label":1919,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1920,"versions":1921,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1923},"package:pypi:simple-websocket","simple-websocket-2bc2e925","pypi:simple-websocket","simple-websocket",[420],[1922],"1.1.0",[56],{"id":1925,"slug":1926,"identity":1927,"label":1928,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1929,"versions":1930,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1932},"package:pypi:six","six-3c3888bd","pypi:six","six",[420],[1931],"1.17.0",[56],{"id":1934,"slug":1935,"identity":1936,"label":1937,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1938,"versions":1939,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1941},"package:pypi:sortedcontainers","sortedcontainers-9601b229","pypi:sortedcontainers","sortedcontainers",[377],[1940],"2.4.0",[56],{"id":1943,"slug":1944,"identity":1945,"label":1946,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1947,"versions":1948,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1950},"package:pypi:soundfile","soundfile-10750d91","pypi:soundfile","soundfile",[390],[1949],"0.14.0",[56],{"id":1952,"slug":1953,"identity":1954,"label":1955,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1956,"versions":1958,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1959},"package:pypi:soxr","soxr-a0701a3a","pypi:soxr","soxr",[1697,1957],"LGPL-2.1-or-later",[1922],[56],{"id":1961,"slug":1962,"identity":1963,"label":1964,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1965,"versions":1966,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1968},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[420],[1967],"2.0.51",[56],{"id":1970,"slug":1971,"identity":1972,"label":1973,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1974,"versions":1975,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1977},"package:pypi:stevedore","stevedore-32e10f96","pypi:stevedore","stevedore",[377],[1976],"5.8.0",[56],{"id":1979,"slug":1980,"identity":1981,"label":1982,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1983,"versions":1984,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1986},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[390,420,401],[1985],"1.14.0",[56],{"id":1988,"slug":1989,"identity":1990,"label":1991,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":1992,"versions":1993,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":1995},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[390],[1994],"3.6.0",[56],{"id":1997,"slug":1998,"identity":1999,"label":2000,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2001,"versions":2002,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2004},"package:pypi:tinycss2","tinycss2-301fccf6","pypi:tinycss2","tinycss2",[401],[2003],"1.5.1",[56],{"id":2006,"slug":2007,"identity":2008,"label":2009,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2010,"versions":2011,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2013},"package:pypi:tomli","tomli-e09082bd","pypi:tomli","tomli",[420],[2012],"2.4.1",[56],{"id":2015,"slug":2016,"identity":2017,"label":2018,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2019,"versions":2020,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2022},"package:pypi:tomli-w","tomli-w-661031c8","pypi:tomli-w","tomli-w",[420],[2021],"1.2.0",[56],{"id":2024,"slug":2025,"identity":2026,"label":2027,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2028,"versions":2029,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2030},"package:pypi:toolz","toolz-fb894e20","pypi:toolz","toolz",[390],[1922],[56],{"id":2032,"slug":2033,"identity":2034,"label":2035,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2036,"versions":2037,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2039},"package:pypi:torch-audiomentations","torch-audiomentations-2d2db22f","pypi:torch-audiomentations","torch-audiomentations",[420],[2038],"0.12.0",[56],{"id":2041,"slug":2042,"identity":2043,"label":2044,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2045,"versions":2046,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2048},"package:pypi:torch-pitch-shift","torch-pitch-shift-44bcef4d","pypi:torch-pitch-shift","torch-pitch-shift",[420],[2047],"1.2.5",[56],{"id":2050,"slug":2051,"identity":2052,"label":2053,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2054,"versions":2055,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2056},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[675,401],[392],[56],{"id":2058,"slug":2059,"identity":2060,"label":2061,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2062,"versions":2063,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2064},"package:pypi:torchcodec","torchcodec-8b0b8074","pypi:torchcodec","torchcodec",[],[1949],[56],{"id":2066,"slug":2067,"identity":2068,"label":2069,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2070,"versions":2071,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2072},"package:pypi:torchmetrics","torchmetrics-87072a51","pypi:torchmetrics","torchmetrics",[377],[412],[56],{"id":2074,"slug":2075,"identity":2076,"label":2077,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2078,"versions":2079,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2081},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[420],[2080],"3.5.1",[56],{"id":2083,"slug":2084,"identity":2085,"label":2086,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2087,"versions":2088,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2090},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[420],[2089],"0.27.3",[56],{"id":73,"slug":74,"identity":2092,"label":75,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2093,"versions":2094,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2096},"pypi:typing-extensions",[730,401],[2095],"4.15.0",[56],{"id":2098,"slug":2099,"identity":2100,"label":2101,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2102,"versions":2103,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2105},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[420],[2104],"0.4.2",[56],{"id":2107,"slug":2108,"identity":2109,"label":2110,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2111,"versions":2112,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2114},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[377],[2113],"2026.2",[56],{"id":2116,"slug":2117,"identity":2118,"label":2119,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2120,"versions":2121,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2123},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[390],[2122],"0.49.0",[56],{"id":2125,"slug":2126,"identity":2127,"label":2128,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2129,"versions":2130,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2132},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[420],[2131],"0.22.1",[56],{"id":2134,"slug":2135,"identity":2136,"label":2137,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2138,"versions":2139,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2140},"package:pypi:wakepy","wakepy-586883b0","pypi:wakepy","wakepy",[420],[1185],[56],{"id":2142,"slug":2143,"identity":2144,"label":2145,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2146,"versions":2147,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2148},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[420],[2021],[56],{"id":2150,"slug":2151,"identity":2152,"label":2153,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2154,"versions":2155,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2157},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[401],[2156],"0.5.1",[56],{"id":2159,"slug":2160,"identity":2161,"label":2162,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2163,"versions":2164,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2166},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[390],[2165],"16.0",[56],{"id":2168,"slug":2169,"identity":2170,"label":2171,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2172,"versions":2173,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2175},"package:pypi:wsproto","wsproto-d5a3a1f2","pypi:wsproto","wsproto",[420],[2174],"1.3.2",[56],{"id":2177,"slug":2178,"identity":2179,"label":2180,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2181,"versions":2182,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2184},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[377],[2183],"1.24.2",[56],{"id":2186,"slug":2187,"identity":2188,"label":2189,"aiRelevant":47,"provider":387,"advisoryCount":39,"licenseExpressions":2190,"versions":2191,"dossier":47,"occurrenceCount":32,"directOccurrenceCount":39,"evidenceFiles":2193},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[420],[2192],"4.1.0",[56],[2195,2234,2270,2294,2316,2340,2384,2418,2448,2480,2514,2547,2590,2623,2648,2684,2706,2749,2775,2801,2827,2850,2877,2903,2925,2951,2972,2992,3028,3046,3070,3094,3120,3149,3183,3222,3248,3273,3302,3331,3358,3384,3407,3434,3457,3495,3532,3556,3580,3598,3622,3645,3666,3695,3725,3775,3802,3821,3847,3875,3896,3919,3945,3972,3992,4015,4037,4060,4096,4122,4145,4169,4195,4216,4248,4272,4304,4344,4367,4394,4413,4464,4488,4525,4557,4579,4598,4629,4652,4677,4701,4723,4761,4787,4814,4834,4864,4884,4904,4929,4961,4983,5038,5062,5085,5117,5144,5164,5195,5216,5249,5274,5302,5323,5343,5382,5406,5434,5457,5480,5499,5524,5550,5574,5607,5632,5657,5684,5705,5729,5752,5780,5801,5835,5869,5891,5914,5938,5958,5993,6023,6044,6066,6088,6120,6141,6164,6191,6216,6242,6263,6292,6316,6335,6356,6393,6414,6444,6472,6495,6538,6563,6586,6609,6631,6652,6675,6697,6721,6748,6773,6797,6818,6842,6863,6889,6911,6938,6972,6992,7012,7045,7072,7099,7141,7173,7200,7228,7255,7277,7299,7333,7354,7380,7402,7426,7449,7477,7504,7533,7551,7575,7598,7628,7650,7701,7753,7776,7802,7821,7855,7880,7912,7931,7959,7978,8001,8022,8049,8072,8097,8118,8144,8174,8194,8211,8230,8247,8268,8284,8299,8316,8331,8348,8365,8382,8395,8408,8421,8434,8447,8460,8473,8486],{"id":110,"slug":2196,"dossier":91,"summary":2197,"aliases":2198,"sourceIds":2201,"published":2202,"modified":2203,"checkedAt":7,"severity":2204,"references":2208,"versionKeys":2222,"packageCount":32,"repositoryCount":2233},"ghsa-22hg-r758-rrw9-14adf850","Pillow: Infinite loop in MIC n_frames when the embedded TIFF",[2199,2200],"BIT-pillow-2026-112390","CVE-2026-112390",[110],"2026-10-21T20:39:49Z","2026-10-26T08:56:03.565713059Z",[2205],{"type":2206,"score":2207},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2209,2212,2215,2217,2220],{"type":2210,"url":2211},"WEB","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-22hg-r758-rrw9",{"type":2213,"url":2214},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112390",{"type":2210,"url":2216},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F26cb3ed061173b817b9ee4b6f507cb0e1e293218",{"type":2218,"url":2219},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2210,"url":2221},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F13.0.0",[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1","pypi:pillow@12.2.0","pypi:pillow@12.3.0",19,{"id":111,"slug":2235,"dossier":47,"summary":2236,"aliases":2237,"sourceIds":2240,"published":2241,"modified":2242,"checkedAt":7,"severity":2243,"references":2247,"versionKeys":2268,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2238,2239],"CVE-2024-39689","PYSEC-2024-230",[111,2239],"2024-07-05T19:15:10Z","2026-09-10T03:50:15.994602411Z",[2244],{"type":2245,"score":2246},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2248,2250,2252,2255,2257,2259,2262,2264,2266],{"type":2213,"url":2249},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2213,"url":2251},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2253,"url":2254},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2218,"url":2256},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2210,"url":2258},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2260,"url":2261},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2210,"url":2263},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2213,"url":2265},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2213,"url":2267},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2269],"pypi:certifi@2024.6.2",{"id":112,"slug":2271,"dossier":91,"summary":2272,"aliases":2273,"sourceIds":2276,"published":2277,"modified":2278,"checkedAt":7,"severity":2279,"references":2282,"versionKeys":2293,"packageCount":32,"repositoryCount":2233},"ghsa-24rc-8hj2-v98c-379a2f18","Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape \u002F absolute mode",[2274,2275],"BIT-pillow-2026-96638","CVE-2026-96638",[112],"2026-10-22T15:59:35Z","2026-10-29T10:55:36.262902070Z",[2280],{"type":2245,"score":2281},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2283,2285,2287,2289,2291,2292],{"type":2210,"url":2284},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-24rc-8hj2-v98c",{"type":2213,"url":2286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96638",{"type":2210,"url":2288},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10015",{"type":2210,"url":2290},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe7794835e323ff2691d9b3a974cade1a44301b9a",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":113,"slug":2295,"dossier":91,"summary":2296,"aliases":2297,"sourceIds":2300,"published":2301,"modified":2302,"checkedAt":7,"severity":2303,"references":2306,"versionKeys":2315,"packageCount":32,"repositoryCount":2233},"ghsa-254f-3936-288h-1cc364b4","Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()",[2298,2299],"BIT-pillow-2026-112391","CVE-2026-112391",[113],"2026-10-21T21:11:07Z","2026-10-26T08:56:17.690706279Z",[2304],{"type":2206,"score":2305},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2307,2309,2311,2313,2314],{"type":2210,"url":2308},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-254f-3936-288h",{"type":2213,"url":2310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112391",{"type":2210,"url":2312},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F94cb11c44ff7345414da17ebfea1598a529ad9cd",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":114,"slug":2317,"dossier":91,"summary":2318,"aliases":2319,"sourceIds":2323,"published":2324,"modified":2325,"checkedAt":7,"severity":2326,"references":2330,"versionKeys":2339,"packageCount":32,"repositoryCount":2233},"ghsa-27h8-gf7j-v5hc-bd4ebeac","Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images",[2320,2321,2322],"BIT-pillow-2026-112392","CVE-2026-112392","PYSEC-2026-4326",[114,2322],"2026-10-19T22:17:06.587Z","2026-10-27T11:10:35.409737764Z",[2327,2328],{"type":2206,"score":2207},{"type":2245,"score":2329},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2331,2333,2335,2337,2338],{"type":2253,"url":2332},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-27h8-gf7j-v5hc",{"type":2213,"url":2334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112392",{"type":2253,"url":2336},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F443e3130a8c11594fd0e296afad497e11e678961",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":115,"slug":2341,"dossier":47,"summary":2342,"aliases":2343,"sourceIds":2346,"published":2347,"modified":2348,"checkedAt":7,"severity":2349,"references":2352,"versionKeys":2373,"packageCount":32,"repositoryCount":2383},"ghsa-27vj-qcqg-25rc-06b922e9","fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution",[2344,2345],"CVE-2026-104851","PYSEC-2026-4217",[115,2345],"2026-10-05T22:53:22Z","2026-10-15T14:56:18.658408345Z",[2350],{"type":2245,"score":2351},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2353,2355,2357,2359,2361,2363,2365,2367,2369,2371],{"type":2210,"url":2354},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fsecurity\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",{"type":2213,"url":2356},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104851",{"type":2210,"url":2358},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2029",{"type":2210,"url":2360},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fpull\u002F2039",{"type":2210,"url":2362},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002F86438783f93b1398ef245b92f0e6063b445b611c",{"type":2210,"url":2364},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Fcommit\u002Fa1c16ab3f07f354aa371c38f7b1b07ea7fd4c5c8",{"type":2218,"url":2366},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec",{"type":2210,"url":2368},"https:\u002F\u002Fgithub.com\u002Ffsspec\u002Ffilesystem_spec\u002Freleases\u002Ftag\u002F2026.6.0",{"type":2218,"url":2370},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffsspec",{"type":2213,"url":2372},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-27vj-qcqg-25rc",[2374,2375,2376,2377,2378,2379,2380,2381,2382],"pypi:fsspec@2024.9.0","pypi:fsspec@2025.10.0","pypi:fsspec@2025.3.0","pypi:fsspec@2025.3.2","pypi:fsspec@2025.5.0","pypi:fsspec@2025.9.0","pypi:fsspec@2026.1.0","pypi:fsspec@2026.2.0","pypi:fsspec@2026.3.0",15,{"id":116,"slug":2385,"dossier":47,"summary":2386,"aliases":2387,"sourceIds":2390,"published":2391,"modified":2392,"checkedAt":7,"severity":2393,"references":2396,"versionKeys":2408,"packageCount":32,"repositoryCount":66},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2388,2389],"CVE-2026-4372","PYSEC-2026-2289",[116,2389],"2026-05-24T14:16:16.917Z","2026-09-10T03:50:45.254378086Z",[2394],{"type":2245,"score":2395},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2397,2399,2401,2403,2406],{"type":2213,"url":2398},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2253,"url":2400},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2218,"url":2402},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2404,"url":2405},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2213,"url":2407},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2409,2410,2411,2412,2413,2414,2415,2416,2417],"pypi:transformers@4.47.1","pypi:transformers@4.51.0","pypi:transformers@4.51.3","pypi:transformers@4.52.4","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":117,"slug":2419,"dossier":47,"summary":2420,"aliases":2421,"sourceIds":2424,"published":2425,"modified":2426,"checkedAt":7,"severity":2427,"references":2431,"versionKeys":2442,"packageCount":32,"repositoryCount":34},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[2422,2423],"CVE-2026-27199","PYSEC-2026-2320",[117,2423],"2026-02-19T20:32:45Z","2026-09-10T03:50:33.709103081Z",[2428,2429],{"type":2206,"score":2305},{"type":2245,"score":2430},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2432,2434,2436,2438,2440],{"type":2213,"url":2433},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":2213,"url":2435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":2253,"url":2437},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":2218,"url":2439},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":2213,"url":2441},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[2443,2444,2445,2446,2447],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":118,"slug":2449,"dossier":47,"summary":2450,"aliases":2451,"sourceIds":2454,"published":2455,"modified":2456,"checkedAt":7,"severity":2457,"references":2459,"versionKeys":2476,"packageCount":32,"repositoryCount":518},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2452,2453],"CVE-2025-54121","PYSEC-2026-1941",[118,2453],"2025-07-21T19:34:23Z","2026-09-10T03:50:25.704876348Z",[2458],{"type":2245,"score":2430},[2460,2462,2464,2466,2468,2470,2472,2474],{"type":2210,"url":2461},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2213,"url":2463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2253,"url":2465},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2218,"url":2467},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2210,"url":2469},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2210,"url":2471},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2218,"url":2473},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2213,"url":2475},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2477,2478,2479],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":119,"slug":2481,"dossier":47,"summary":2482,"aliases":2483,"sourceIds":2486,"published":2487,"modified":2488,"checkedAt":7,"severity":2489,"references":2493,"versionKeys":2504,"packageCount":32,"repositoryCount":66},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2484,2485],"CVE-2026-54279","PYSEC-2026-2112",[119,2485],"2026-06-15T20:08:51Z","2026-11-03T16:45:04.163545105Z",[2490,2491],{"type":2245,"score":2329},{"type":2206,"score":2492},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",[2494,2496,2498,2500,2502],{"type":2213,"url":2495},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2213,"url":2497},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54279",{"type":2253,"url":2499},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",{"type":2218,"url":2501},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2210,"url":2503},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2112.yaml",[2505,2506,2507,2508,2509,2510,2511,2512,2513],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3","pypi:aiohttp@3.13.5",{"id":120,"slug":2515,"dossier":47,"summary":2516,"aliases":2517,"sourceIds":2520,"published":2521,"modified":2522,"checkedAt":7,"severity":2523,"references":2526,"versionKeys":2546,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[2518,2519],"CVE-2024-34069","PYSEC-2026-2043",[120,2519],"2024-05-06T14:21:27Z","2026-09-10T03:50:13.189126850Z",[2524],{"type":2245,"score":2525},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2527,2529,2531,2533,2534,2536,2538,2540,2542,2544],{"type":2210,"url":2528},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":2213,"url":2530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":2210,"url":2532},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":2218,"url":2439},{"type":2210,"url":2535},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":2210,"url":2537},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":2210,"url":2539},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":2210,"url":2541},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":2218,"url":2543},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":2213,"url":2545},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[2443],{"id":121,"slug":2548,"dossier":47,"summary":2549,"aliases":2550,"sourceIds":2552,"published":2553,"modified":2554,"checkedAt":7,"severity":2555,"references":2558,"versionKeys":2586,"packageCount":32,"repositoryCount":2589},"ghsa-2g87-pp6c-29x5-5aaa26fd","aiohttp: Multiple instances of excessive or unbounded memory\u002FCPU use",[2551],"CVE-2026-123817",[121],"2026-10-19T17:07:23Z","2026-11-09T21:30:07.738926065Z",[2556],{"type":2206,"score":2557},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2559,2561,2563,2565,2567,2569,2571,2573,2575,2577,2579,2581,2583,2584],{"type":2210,"url":2560},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2g87-pp6c-29x5",{"type":2210,"url":2562},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F09bcaa73ff084a0c539bbf16a0a78743acb7141f",{"type":2210,"url":2564},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae507423f681161efa77d20052b4054397c7fb6",{"type":2210,"url":2566},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F3d850ee9b92573c7e913821cbcb96005beb3f4df",{"type":2210,"url":2568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47babd8c23ca79e2bae6cc8dcb5752b61e369fc7",{"type":2210,"url":2570},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F615fec3d4f088f30d2ee72cad760152e92aa1c53",{"type":2210,"url":2572},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6963ee0befec1502b6bb7b4db6c72d044c08f4fa",{"type":2210,"url":2574},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a4f6682817839313b04b8e5cea2b39c1a88ab4f",{"type":2210,"url":2576},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8cfbe9abe5e11b84006a10f9bdf82bf607671dab",{"type":2210,"url":2578},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa555ab698e08e9baea7386d5b4c0761cb8956fdd",{"type":2210,"url":2580},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc6ac0e44c3c573ff9616f4a6a532992538b31e43",{"type":2210,"url":2582},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fd925a80539ffd227da1d93ab4a5bff123cc777db",{"type":2218,"url":2501},{"type":2210,"url":2585},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.4",[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],"pypi:aiohttp@3.14.1","pypi:aiohttp@3.14.3",13,{"id":122,"slug":2591,"dossier":47,"summary":2592,"aliases":2593,"sourceIds":2596,"published":2597,"modified":2598,"checkedAt":7,"severity":2599,"references":2602,"versionKeys":2619,"packageCount":32,"repositoryCount":2622},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2594,2595],"CVE-2026-44307","PYSEC-2026-2617",[122,2595],"2026-05-06T21:45:16Z","2026-09-10T03:50:45.452547864Z",[2600],{"type":2206,"score":2601},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2603,2605,2607,2609,2611,2613,2615,2617],{"type":2210,"url":2604},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2213,"url":2606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2210,"url":2608},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2210,"url":2610},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2218,"url":2612},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2210,"url":2614},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2218,"url":2616},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2213,"url":2618},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2620,2621],"pypi:mako@1.3.10","pypi:mako@1.3.8",5,{"id":123,"slug":2624,"dossier":47,"summary":2625,"aliases":2626,"sourceIds":2629,"published":2630,"modified":2631,"checkedAt":7,"severity":2632,"references":2637,"versionKeys":2647,"packageCount":32,"repositoryCount":470},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2627,2628],"CVE-2026-34514","PYSEC-2026-2096",[123,2628],"2026-04-01T21:16:59.417Z","2026-09-10T03:50:42.288164171Z",[2633,2635],{"type":2206,"score":2634},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":2636},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2638,2640,2642,2644,2645],{"type":2253,"url":2639},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2213,"url":2641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2253,"url":2643},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2218,"url":2501},{"type":2213,"url":2646},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2505,2506,2507,2508,2509,2510,2511,2512],{"id":124,"slug":2649,"dossier":47,"summary":2650,"aliases":2651,"sourceIds":2654,"published":2655,"modified":2656,"checkedAt":7,"severity":2657,"references":2660,"versionKeys":2677,"packageCount":32,"repositoryCount":2683},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2652,2653],"CVE-2025-66471","PYSEC-2026-1994",[124,2653],"2025-12-05T18:15:54Z","2026-09-25T17:15:05.968189421Z",[2658],{"type":2206,"score":2659},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2661,2663,2665,2667,2669,2671,2673,2675],{"type":2210,"url":2662},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2213,"url":2664},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2253,"url":2666},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2210,"url":2668},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fd0fde3672e4a4093f7587858dccfc298eb66e46c",{"type":2213,"url":2670},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2210,"url":2672},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-1994.yaml",{"type":2218,"url":2674},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2218,"url":2676},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",[2678,2679,2680,2681,2682],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",17,{"id":125,"slug":2685,"dossier":91,"summary":2686,"aliases":2687,"sourceIds":2690,"published":2691,"modified":2692,"checkedAt":7,"severity":2693,"references":2696,"versionKeys":2705,"packageCount":32,"repositoryCount":2233},"ghsa-332p-7hrc-92wf-af7b2989","Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO",[2688,2689],"BIT-pillow-2026-112393","CVE-2026-112393",[125],"2026-10-21T21:28:09Z","2026-10-26T08:56:07.886625845Z",[2694],{"type":2206,"score":2695},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2697,2699,2701,2703,2704],{"type":2210,"url":2698},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-332p-7hrc-92wf",{"type":2213,"url":2700},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112393",{"type":2210,"url":2702},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F11582e5ffbdceb973d5ee593f3105af5a9852b40",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":126,"slug":2707,"dossier":47,"summary":2708,"aliases":2709,"sourceIds":2713,"published":2714,"modified":2715,"checkedAt":7,"severity":2716,"references":2723,"versionKeys":2745,"packageCount":32,"repositoryCount":103},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2710,2711,2712],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[126,2712],"2025-03-30T16:15:14.380Z","2026-09-10T03:50:22.781448235Z",[2717,2719,2721],{"type":2245,"score":2718},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2206,"score":2720},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2245,"score":2722},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2724,2726,2729,2731,2733,2735,2737,2739,2741,2743],{"type":2213,"url":2725},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2727,"url":2728},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2727,"url":2730},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2210,"url":2732},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2218,"url":2734},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2210,"url":2736},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2727,"url":2738},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2213,"url":2740},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2213,"url":2742},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2213,"url":2744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2746,2747,2748],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":127,"slug":2750,"dossier":47,"summary":2751,"aliases":2752,"sourceIds":2755,"published":2756,"modified":2757,"checkedAt":7,"severity":2758,"references":2760,"versionKeys":2774,"packageCount":32,"repositoryCount":103},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2753,2754],"CVE-2025-3933","PYSEC-2026-1977",[127,2754],"2025-07-11T12:30:32Z","2026-09-10T03:50:57.888142744Z",[2759],{"type":2245,"score":2430},[2761,2763,2765,2767,2768,2770,2772],{"type":2213,"url":2762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2210,"url":2764},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2210,"url":2766},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2218,"url":2402},{"type":2210,"url":2769},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2218,"url":2771},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2213,"url":2773},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2409,2410,2411],{"id":128,"slug":2776,"dossier":47,"summary":2777,"aliases":2778,"sourceIds":2781,"published":2782,"modified":2783,"checkedAt":7,"severity":2784,"references":2787,"versionKeys":2800,"packageCount":32,"repositoryCount":2683},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2779,2780],"CVE-2026-21441","PYSEC-2026-1996",[128,2780],"2026-01-07T19:18:14Z","2026-09-10T03:50:32.562010895Z",[2785,2786],{"type":2245,"score":2329},{"type":2206,"score":2659},[2788,2790,2792,2794,2795,2797,2798],{"type":2210,"url":2789},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2213,"url":2791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2253,"url":2793},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2218,"url":2674},{"type":2210,"url":2796},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2218,"url":2676},{"type":2213,"url":2799},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2678,2679,2680,2681,2682],{"id":129,"slug":2802,"dossier":91,"summary":2803,"aliases":2804,"sourceIds":2808,"published":2809,"modified":2810,"checkedAt":7,"severity":2811,"references":2815,"versionKeys":2826,"packageCount":32,"repositoryCount":2233},"ghsa-3j72-p6qg-6xp7-6d019684","Pillow: TarIO negative size field causes infinite CPU-spin loop",[2805,2806,2807],"BIT-pillow-2026-96642","CVE-2026-96642","PYSEC-2026-4341",[129,2807],"2026-10-21T21:20:32.650Z","2026-10-29T10:55:45.826300321Z",[2812,2814],{"type":2206,"score":2813},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":2281},[2816,2818,2820,2822,2824,2825],{"type":2213,"url":2817},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-3j72-p6qg-6xp7",{"type":2213,"url":2819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96642",{"type":2727,"url":2821},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10012",{"type":2253,"url":2823},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19b695fdcc5eddc37374e2b1645fc4185edaf71d",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":130,"slug":2828,"dossier":47,"summary":2829,"aliases":2830,"sourceIds":2833,"published":2834,"modified":2835,"checkedAt":7,"severity":2836,"references":2840,"versionKeys":2849,"packageCount":32,"repositoryCount":470},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2831,2832],"CVE-2026-34517","PYSEC-2026-2099",[130,2832],"2026-04-01T21:16:59.870Z","2026-09-10T03:50:42.683852324Z",[2837,2839],{"type":2206,"score":2838},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":2430},[2841,2843,2845,2847,2848],{"type":2253,"url":2842},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2213,"url":2844},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2253,"url":2846},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":131,"slug":2851,"dossier":91,"summary":2852,"aliases":2853,"sourceIds":2857,"published":2858,"modified":2859,"checkedAt":7,"severity":2860,"references":2865,"versionKeys":2876,"packageCount":32,"repositoryCount":2233},"ghsa-4558-3h8r-v8xp-9e09a0b2","Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size",[2854,2855,2856],"BIT-pillow-2026-112394","CVE-2026-112394","PYSEC-2026-4327",[131,2856],"2026-10-19T21:17:07.747Z","2026-10-27T11:10:34.006455299Z",[2861,2863],{"type":2206,"score":2862},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":2864},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:H",[2866,2868,2870,2872,2874,2875],{"type":2404,"url":2867},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4558-3h8r-v8xp",{"type":2213,"url":2869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112394",{"type":2210,"url":2871},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9723",{"type":2253,"url":2873},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F392ee6f0d19a4adb766a63e9a99f3c28193b8d31",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":132,"slug":2878,"dossier":47,"summary":2879,"aliases":2880,"sourceIds":2884,"published":2885,"modified":2886,"checkedAt":7,"severity":2887,"references":2889,"versionKeys":2901,"packageCount":32,"repositoryCount":2902},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2881,2882,2883],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[132,2883],"2026-07-06T19:17:08.577Z","2026-09-10T03:50:51.372929814Z",[2888],{"type":2245,"score":2329},[2890,2892,2894,2896,2898,2899],{"type":2404,"url":2891},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2213,"url":2893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2253,"url":2895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2210,"url":2897},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2218,"url":2219},{"type":2213,"url":2900},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2223,2224,2225,2226,2227,2228,2229,2230,2231],18,{"id":133,"slug":2904,"dossier":91,"summary":2905,"aliases":2906,"sourceIds":2909,"published":2910,"modified":2911,"checkedAt":7,"severity":2912,"references":2915,"versionKeys":2924,"packageCount":32,"repositoryCount":2233},"ghsa-462x-pgg6-55fp-29049dd8","Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)",[2907,2908],"BIT-pillow-2026-112395","CVE-2026-112395",[133],"2026-10-20T20:49:26Z","2026-10-26T08:56:01.770928143Z",[2913],{"type":2245,"score":2914},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[2916,2918,2920,2922,2923],{"type":2210,"url":2917},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-462x-pgg6-55fp",{"type":2213,"url":2919},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112395",{"type":2210,"url":2921},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F76869efdbbf2ad7dccd7536520fb61b7a00ab61e",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":134,"slug":2926,"dossier":47,"summary":2927,"aliases":2928,"sourceIds":2931,"published":2932,"modified":2933,"checkedAt":7,"severity":2934,"references":2937,"versionKeys":2950,"packageCount":32,"repositoryCount":480},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2929,2930],"CVE-2025-50182","PYSEC-2026-1997",[134,2930],"2025-06-18T17:50:11Z","2026-09-10T03:50:24.821170285Z",[2935],{"type":2245,"score":2936},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2938,2940,2942,2944,2945,2947,2948],{"type":2210,"url":2939},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2213,"url":2941},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2253,"url":2943},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2218,"url":2674},{"type":2210,"url":2946},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2218,"url":2676},{"type":2213,"url":2949},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2678,2679,2680,2681],{"id":135,"slug":2952,"dossier":47,"summary":2953,"aliases":2954,"sourceIds":2956,"published":2957,"modified":2958,"checkedAt":7,"severity":2959,"references":2962,"versionKeys":2971,"packageCount":32,"repositoryCount":2589},"ghsa-494j-54xm-rwp3-eab1773e","AIOHTTP: Secure attribute not enforced for shared cookie",[2955],"CVE-2026-111063",[135],"2026-10-19T17:07:47Z","2026-10-26T15:00:05.287728271Z",[2960],{"type":2206,"score":2961},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2963,2965,2967,2969,2970],{"type":2210,"url":2964},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-494j-54xm-rwp3",{"type":2213,"url":2966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111063",{"type":2210,"url":2968},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F999c356d61e966faffa97b06ab0d0455226d36c5",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":136,"slug":2973,"dossier":47,"summary":2974,"aliases":2975,"sourceIds":2978,"published":2979,"modified":2980,"checkedAt":7,"severity":2981,"references":2985,"versionKeys":2991,"packageCount":32,"repositoryCount":66},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2976,2977],"CVE-2026-54273","PYSEC-2026-2107",[136,2977],"2026-06-15T20:10:32Z","2026-09-10T03:51:07.881817751Z",[2982,2984],{"type":2206,"score":2983},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":2329},[2986,2988,2990],{"type":2213,"url":2987},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2253,"url":2989},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":137,"slug":2993,"dossier":47,"summary":2994,"aliases":2995,"sourceIds":2998,"published":2999,"modified":3000,"checkedAt":7,"severity":3001,"references":3006,"versionKeys":3023,"packageCount":32,"repositoryCount":518},"ghsa-4j2p-28q2-5m79-f1478ba7","Accelerate path traversal and denial of service via sharded checkpoint weight_map entries",[2996,2997],"CVE-2026-69112","PYSEC-2026-3804",[137,2997],"2026-08-10T21:32:04Z","2026-09-10T12:25:52.792193450Z",[3002,3004],{"type":2245,"score":3003},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"type":2206,"score":3005},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3007,3009,3011,3013,3015,3017,3019,3021],{"type":2213,"url":3008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69112",{"type":2210,"url":3010},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fissues\u002F4067",{"type":2210,"url":3012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4070",{"type":2210,"url":3014},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate\u002Fpull\u002F4138",{"type":2218,"url":3016},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Faccelerate",{"type":2210,"url":3018},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fhugging-face-accelerate-path-traversal-and-dos-via-weight-map",{"type":2218,"url":3020},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faccelerate",{"type":2213,"url":3022},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4j2p-28q2-5m79",[3024,3025,3026,3027],"pypi:accelerate@1.11.0","pypi:accelerate@1.12.0","pypi:accelerate@1.13.0","pypi:accelerate@1.2.1",{"id":138,"slug":3029,"dossier":47,"summary":3030,"aliases":3031,"sourceIds":3034,"published":3035,"modified":3036,"checkedAt":7,"severity":3037,"references":3041,"versionKeys":3045,"packageCount":32,"repositoryCount":66},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3032,3033],"CVE-2026-54275","PYSEC-2026-237",[138,3033],"2026-06-15T20:11:13Z","2026-09-10T03:50:48.205198252Z",[3038,3040],{"type":2206,"score":3039},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":2329},[3042,3044],{"type":2213,"url":3043},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":139,"slug":3047,"dossier":91,"summary":3048,"aliases":3049,"sourceIds":3053,"published":3054,"modified":3055,"checkedAt":7,"severity":3056,"references":3058,"versionKeys":3069,"packageCount":32,"repositoryCount":2233},"ghsa-4rm8-3hmm-39fg-6e9ca404","Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise",[3050,3051,3052],"BIT-pillow-2026-96641","CVE-2026-96641","PYSEC-2026-4340",[139,3052],"2026-10-21T21:20:32.500Z","2026-10-29T10:56:07.449486409Z",[3057],{"type":2245,"score":2281},[3059,3061,3063,3065,3067,3068],{"type":2213,"url":3060},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rm8-3hmm-39fg",{"type":2213,"url":3062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96641",{"type":2727,"url":3064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10010",{"type":2253,"url":3066},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F80de4be9e38d3a6148dd4d8491eb80cd12b760a4",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":140,"slug":3071,"dossier":47,"summary":3072,"aliases":3073,"sourceIds":3077,"published":3078,"modified":3079,"checkedAt":7,"severity":3080,"references":3084,"versionKeys":3093,"packageCount":32,"repositoryCount":66},"ghsa-4rr5-89j8-mwwm-f8e3c770","Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer",[3074,3075,3076],"BIT-pillow-2026-112396","CVE-2026-112396","PYSEC-2026-4328",[140,3076],"2026-10-19T22:17:06.837Z","2026-10-27T11:10:49.694224501Z",[3081,3083],{"type":2245,"score":3082},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2245,"score":2329},[3085,3087,3089,3091,3092],{"type":2404,"url":3086},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4rr5-89j8-mwwm",{"type":2213,"url":3088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112396",{"type":2253,"url":3090},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fdc95da20207827a062cfbf551ee9f6031465a8bb",{"type":2218,"url":2219},{"type":2213,"url":2221},[2227,2228,2229,2230,2231,2232],{"id":141,"slug":3095,"dossier":47,"summary":3096,"aliases":3097,"sourceIds":3100,"published":3101,"modified":3102,"checkedAt":7,"severity":3103,"references":3106,"versionKeys":3119,"packageCount":32,"repositoryCount":518},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3098,3099],"CVE-2025-6921","PYSEC-2026-1980",[141,3099],"2025-09-23T15:31:09Z","2026-09-10T03:50:27.867584538Z",[3104],{"type":2245,"score":3105},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3107,3109,3111,3113,3114,3116,3117],{"type":2213,"url":3108},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2210,"url":3110},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2210,"url":3112},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2218,"url":2402},{"type":2210,"url":3115},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2218,"url":2771},{"type":2213,"url":3118},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2409,2410,2411,2412],{"id":142,"slug":3121,"dossier":47,"summary":3122,"aliases":3123,"sourceIds":3127,"published":3128,"modified":3129,"checkedAt":7,"severity":3130,"references":3133,"versionKeys":3148,"packageCount":32,"repositoryCount":2902},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3124,3125,3126],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[142,3126],"2026-07-06T19:17:08.830Z","2026-09-10T03:51:10.324377232Z",[3131],{"type":2245,"score":3132},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3134,3136,3138,3140,3142,3144,3146,3147],{"type":2404,"url":3135},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2213,"url":3137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2253,"url":3139},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2253,"url":3141},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2253,"url":3143},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2210,"url":3145},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2218,"url":2219},{"type":2213,"url":2900},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":143,"slug":3150,"dossier":47,"summary":3151,"aliases":3152,"sourceIds":3155,"published":3156,"modified":3157,"checkedAt":7,"severity":3158,"references":3161,"versionKeys":3180,"packageCount":32,"repositoryCount":103},"ghsa-4xh5-x5gv-qwph-bdb101cb","pip's fallback tar extraction doesn't check symbolic links point to extraction directory",[3153,3154],"CVE-2025-8869","PYSEC-2026-1795",[143,3154],"2025-09-24T15:31:14Z","2026-09-10T03:50:27.949321787Z",[3159],{"type":2206,"score":3160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3162,3164,3166,3168,3170,3172,3174,3176,3178],{"type":2213,"url":3163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8869",{"type":2210,"url":3165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13550",{"type":2253,"url":3167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Ff2b92314da012b9fffa36b3f3e67748a37ef464a",{"type":2218,"url":3169},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip",{"type":2210,"url":3171},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F10\u002Fmsg00028.html",{"type":2210,"url":3173},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FIF5A3GCJY3VH7BVHJKOWOJFKTW7VFQEN",{"type":2210,"url":3175},"https:\u002F\u002Fpip.pypa.io\u002Fen\u002Fstable\u002Fnews\u002F#v25-2",{"type":2218,"url":3177},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpip",{"type":2213,"url":3179},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xh5-x5gv-qwph",[3181,3182],"pypi:pip@22.0.2","pypi:pip@25.1.1",{"id":144,"slug":3184,"dossier":47,"summary":3185,"aliases":3186,"sourceIds":3189,"published":3190,"modified":3191,"checkedAt":7,"severity":3192,"references":3195,"versionKeys":3218,"packageCount":32,"repositoryCount":3221},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3187,3188],"CVE-2026-4539","PYSEC-2026-2987",[144,3188],"2026-03-22T06:30:15Z","2026-09-10T03:50:59.780634752Z",[3193,3194],{"type":2245,"score":2718},{"type":2206,"score":2720},[3196,3198,3200,3202,3204,3206,3208,3210,3212,3214,3216],{"type":2213,"url":3197},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2210,"url":3199},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2210,"url":3201},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2210,"url":3203},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2218,"url":3205},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2210,"url":3207},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2210,"url":3209},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2210,"url":3211},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2210,"url":3213},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2218,"url":3215},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2213,"url":3217},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3219,3220],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",16,{"id":145,"slug":3223,"dossier":47,"summary":3224,"aliases":3225,"sourceIds":3229,"published":3230,"modified":3231,"checkedAt":7,"severity":3232,"references":3237,"versionKeys":3247,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3226,3227,3228],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[145,3228],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3233,3235],{"type":2206,"score":3234},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":3236},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3238,3240,3242,3244,3246],{"type":2213,"url":3239},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2213,"url":3241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2210,"url":3243},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2210,"url":3245},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2218,"url":2734},[2746],{"id":146,"slug":3249,"dossier":47,"summary":3250,"aliases":3251,"sourceIds":3254,"published":3255,"modified":3256,"checkedAt":7,"severity":3257,"references":3260,"versionKeys":3272,"packageCount":32,"repositoryCount":480},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3252,3253],"CVE-2025-69226","PYSEC-2026-1097",[146,3253],"2026-01-05T23:09:51Z","2026-09-10T03:50:32.751498447Z",[3258],{"type":2206,"score":3259},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3261,3263,3265,3267,3268,3270],{"type":2210,"url":3262},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2213,"url":3264},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2253,"url":3266},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2218,"url":2501},{"type":2218,"url":3269},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2213,"url":3271},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2505,2506,2507,2508,2509,2510,2511],{"id":147,"slug":3274,"dossier":47,"summary":3275,"aliases":3276,"sourceIds":3279,"published":3280,"modified":3281,"checkedAt":7,"severity":3282,"references":3284,"versionKeys":3299,"packageCount":32,"repositoryCount":480},"ghsa-54p9-h82j-f925-623d2ef6","Multidict: Reference leak in CIMultiDict\u002FMultiDict items-view union and subtraction",[3277,3278],"CVE-2026-104874","PYSEC-2026-4244",[147,3278],"2026-10-05T23:40:58Z","2026-10-15T14:56:05.601333622Z",[3283],{"type":2245,"score":2430},[3285,3287,3289,3291,3293,3295,3297],{"type":2210,"url":3286},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fsecurity\u002Fadvisories\u002FGHSA-54p9-h82j-f925",{"type":2213,"url":3288},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-104874",{"type":2210,"url":3290},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Fcommit\u002F350b4a07bf8ff851b6d7544e81b1c748bdc74c40",{"type":2218,"url":3292},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict",{"type":2210,"url":3294},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Fmultidict\u002Freleases\u002Ftag\u002Fv6.9.1",{"type":2218,"url":3296},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmultidict",{"type":2213,"url":3298},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54p9-h82j-f925",[3300,3301],"pypi:multidict@6.7.0","pypi:multidict@6.7.1",{"id":148,"slug":3303,"dossier":47,"summary":3304,"aliases":3305,"sourceIds":3308,"published":3309,"modified":3310,"checkedAt":7,"severity":3311,"references":3314,"versionKeys":3329,"packageCount":32,"repositoryCount":34},"ghsa-5639-2j2p-m4mx-3aefc2b3","Mako: Path traversal via drive-letter URI on Windows in TemplateLookup",[3306,3307],"CVE-2026-102991","PYSEC-2026-4243",[148,3307],"2026-10-05T23:42:02Z","2026-10-15T14:55:45.473045835Z",[3312],{"type":2245,"score":3313},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3315,3317,3319,3321,3323,3324,3326,3327],{"type":2210,"url":3316},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",{"type":2213,"url":3318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102991",{"type":2210,"url":3320},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F441",{"type":2210,"url":3322},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F000ed85e4e48771eff460bf4fc721fb43de80e08",{"type":2218,"url":2612},{"type":2210,"url":3325},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_4_2",{"type":2218,"url":2616},{"type":2213,"url":3328},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5639-2j2p-m4mx",[2620,3330,2621],"pypi:mako@1.3.12",{"id":149,"slug":3332,"dossier":47,"summary":3333,"aliases":3334,"sourceIds":3336,"published":3337,"modified":3338,"checkedAt":7,"severity":3339,"references":3342,"versionKeys":3353,"packageCount":32,"repositoryCount":2622},"ghsa-567q-5qvw-pf92-60527ab6","filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",[3335],"CVE-2026-112907",[149],"2026-10-23T22:27:32Z","2026-10-23T22:45:03.452878321Z",[3340],{"type":2245,"score":3341},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3343,3345,3347,3349,3351],{"type":2210,"url":3344},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-567q-5qvw-pf92",{"type":2210,"url":3346},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F835",{"type":2210,"url":3348},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Fe1e825b1992f69fb6b346dc395d5ae4893536c0a",{"type":2218,"url":3350},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2210,"url":3352},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.2.1",[3354,3355,3356,3357],"pypi:filelock@3.25.2","pypi:filelock@3.29.0","pypi:filelock@3.29.4","pypi:filelock@3.29.7",{"id":150,"slug":3359,"dossier":47,"summary":3360,"aliases":3361,"sourceIds":3364,"published":3365,"modified":3366,"checkedAt":7,"severity":3367,"references":3370,"versionKeys":3383,"packageCount":32,"repositoryCount":103},"ghsa-58qw-9mgm-455v-d690efaf","pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files",[3362,3363],"CVE-2026-3219","PYSEC-2026-2875",[150,3363],"2026-04-20T18:31:48Z","2026-09-10T03:50:42.838011658Z",[3368],{"type":2206,"score":3369},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3371,3373,3375,3377,3378,3380,3381],{"type":2213,"url":3372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-3219",{"type":2210,"url":3374},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F13867",{"type":2210,"url":3376},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13870",{"type":2218,"url":3169},{"type":2210,"url":3379},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FQAJ5JIVWWCAJ4EZL2FP5MOOW35JS7LRJ",{"type":2218,"url":3177},{"type":2213,"url":3382},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58qw-9mgm-455v",[3181,3182],{"id":151,"slug":3385,"dossier":91,"summary":3386,"aliases":3387,"sourceIds":3391,"published":3392,"modified":3393,"checkedAt":7,"severity":3394,"references":3397,"versionKeys":3406,"packageCount":32,"repositoryCount":2233},"ghsa-58r4-6rv3-gfh8-17253bd5","Pillow: Out-of-bounds access in _imagingmorph on a zero-width image",[3388,3389,3390],"BIT-pillow-2026-112397","CVE-2026-112397","PYSEC-2026-4329",[151,3390],"2026-10-19T22:17:06.970Z","2026-10-28T11:10:53.627071818Z",[3395,3396],{"type":2206,"score":2557},{"type":2245,"score":2329},[3398,3400,3402,3404,3405],{"type":2404,"url":3399},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-58r4-6rv3-gfh8",{"type":2213,"url":3401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112397",{"type":2253,"url":3403},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F18f7c0dfee93063c51db6ed0ca8c4da2999dcb64",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":152,"slug":3408,"dossier":47,"summary":3409,"aliases":3410,"sourceIds":3413,"published":3414,"modified":3415,"checkedAt":7,"severity":3416,"references":3419,"versionKeys":3432,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3411,3412],"CVE-2024-53981","PYSEC-2026-1851",[152,3412],"2024-12-02T21:37:04Z","2026-09-10T03:50:21.270678783Z",[3417,3418],{"type":2245,"score":2329},{"type":2206,"score":2557},[3420,3422,3424,3426,3428,3430],{"type":2210,"url":3421},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2213,"url":3423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2210,"url":3425},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2218,"url":3427},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2218,"url":3429},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2213,"url":3431},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3433],"pypi:python-multipart@0.0.9",{"id":153,"slug":3435,"dossier":47,"summary":3436,"aliases":3437,"sourceIds":3440,"published":3441,"modified":3442,"checkedAt":7,"severity":3443,"references":3445,"versionKeys":3456,"packageCount":32,"repositoryCount":518},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3438,3439],"CVE-2025-6638","PYSEC-2026-1981",[153,3439],"2025-09-12T12:30:23Z","2026-09-10T03:50:58.113501288Z",[3444],{"type":2245,"score":3105},[3446,3448,3449,3450,3451,3453,3454],{"type":2213,"url":3447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2210,"url":3110},{"type":2210,"url":3112},{"type":2218,"url":2402},{"type":2210,"url":3452},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2218,"url":2771},{"type":2213,"url":3455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2409,2410,2411,2412],{"id":154,"slug":3458,"dossier":47,"summary":3459,"aliases":3460,"sourceIds":3463,"published":3464,"modified":3465,"checkedAt":7,"severity":3466,"references":3469,"versionKeys":3486,"packageCount":32,"repositoryCount":3221},"ghsa-5p39-cfhj-2xmp-77a62550","AnyIO process-pool workers can block indefinitely on undrained stderr",[3461,3462],"CVE-2026-64847","PYSEC-2026-4024",[154,3462],"2026-09-18T17:17:10Z","2026-10-01T17:55:57.336188727Z",[3467],{"type":2206,"score":3468},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3470,3472,3474,3476,3478,3480,3482,3484],{"type":2210,"url":3471},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":2210,"url":3473},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1207",{"type":2210,"url":3475},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002Ff1b7301c8264b0d2e8d24a5788fd29e93dea4040",{"type":2218,"url":3477},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio",{"type":2210,"url":3479},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Freleases\u002Ftag\u002F4.14.2",{"type":2218,"url":3481},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fanyio",{"type":2213,"url":3483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5p39-cfhj-2xmp",{"type":2213,"url":3485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-64847",[3487,3488,3489,3490,3491,3492,3493,3494],"pypi:anyio@4.10.0","pypi:anyio@4.11.0","pypi:anyio@4.12.1","pypi:anyio@4.13.0","pypi:anyio@4.3.0","pypi:anyio@4.5.2","pypi:anyio@4.8.0","pypi:anyio@4.9.0",{"id":155,"slug":3496,"dossier":47,"summary":3497,"aliases":3498,"sourceIds":3502,"published":3503,"modified":3504,"checkedAt":7,"severity":3505,"references":3510,"versionKeys":3527,"packageCount":32,"repositoryCount":518},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3499,3500,3501],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[155,3501],"2025-05-17T16:15:19Z","2026-09-10T03:50:24.253527717Z",[3506,3508],{"type":2206,"score":3507},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2245,"score":3509},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3511,3513,3515,3517,3519,3521,3523,3525],{"type":2404,"url":3512},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2213,"url":3514},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2727,"url":3516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2253,"url":3518},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2210,"url":3520},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2218,"url":3522},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2210,"url":3524},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2260,"url":3526},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3528,3529,3530,3531],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0","pypi:setuptools@78.1.0",{"id":156,"slug":3533,"dossier":47,"summary":3534,"aliases":3535,"sourceIds":3538,"published":3539,"modified":3540,"checkedAt":7,"severity":3541,"references":3543,"versionKeys":3552,"packageCount":32,"repositoryCount":499},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3536,3537],"CVE-2026-53539","PYSEC-2026-3036",[156,3537],"2026-06-15T20:24:09Z","2026-09-10T03:50:48.426087467Z",[3542],{"type":2245,"score":2329},[3544,3546,3547,3548,3550],{"type":2210,"url":3545},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2218,"url":3427},{"type":2218,"url":3429},{"type":2213,"url":3549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2213,"url":3551},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3553,3554,3555,3433],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20","pypi:python-multipart@0.0.28",{"id":157,"slug":3557,"dossier":47,"summary":3558,"aliases":3559,"sourceIds":3562,"published":3563,"modified":3564,"checkedAt":7,"severity":3565,"references":3567,"versionKeys":3578,"packageCount":32,"repositoryCount":32},"ghsa-5w7q-77mv-v69f-f2198303","python-socketio: Binary attachment accumulation can cause denial of service",[3560,3561],"CVE-2026-48804","PYSEC-2026-3042",[157,3561],"2026-06-26T20:51:58Z","2026-07-13T16:43:50.745760053Z",[3566],{"type":2245,"score":2329},[3568,3570,3572,3574,3576],{"type":2210,"url":3569},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio\u002Fsecurity\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":2218,"url":3571},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-socketio",{"type":2218,"url":3573},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-socketio",{"type":2213,"url":3575},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5w7q-77mv-v69f",{"type":2213,"url":3577},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48804",[3579],"pypi:python-socketio@5.14.3",{"id":158,"slug":3581,"dossier":47,"summary":3582,"aliases":3583,"sourceIds":3585,"published":3586,"modified":3587,"checkedAt":7,"severity":3588,"references":3590,"versionKeys":3597,"packageCount":32,"repositoryCount":2589},"ghsa-5wr8-gcqf-gqf3-8b4786ad","aiohttp server lacks an initial request\u002Fheader timeout",[3584],"CVE-2026-111064",[158],"2026-10-19T17:08:04Z","2026-10-19T17:15:04.139404381Z",[3589],{"type":2206,"score":2207},[3591,3593,3595,3596],{"type":2210,"url":3592},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-5wr8-gcqf-gqf3",{"type":2210,"url":3594},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbe846822b4b3a5a54b6163e794b42dc06fba54a3",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":159,"slug":3599,"dossier":91,"summary":3600,"aliases":3601,"sourceIds":3605,"published":3606,"modified":3607,"checkedAt":7,"severity":3608,"references":3612,"versionKeys":3621,"packageCount":32,"repositoryCount":2233},"ghsa-5x8w-8jj5-q52h-96fe86d3","Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution",[3602,3603,3604],"BIT-pillow-2026-112398","CVE-2026-112398","PYSEC-2026-4330",[159,3604],"2026-10-19T22:17:07.107Z","2026-10-28T11:10:48.833199086Z",[3609,3611],{"type":2206,"score":3610},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":3236},[3613,3615,3617,3619,3620],{"type":2404,"url":3614},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x8w-8jj5-q52h",{"type":2213,"url":3616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112398",{"type":2253,"url":3618},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F242a059aedc1935097d9aa1dc3f099750467ba75",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":160,"slug":3623,"dossier":47,"summary":3624,"aliases":3625,"sourceIds":3629,"published":3630,"modified":3631,"checkedAt":7,"severity":3632,"references":3634,"versionKeys":3644,"packageCount":32,"repositoryCount":2902},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3626,3627,3628],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[160,3628],"2026-07-06T19:17:08.270Z","2026-09-10T03:51:10.514604451Z",[3633],{"type":2245,"score":2329},[3635,3637,3639,3640,3642,3643],{"type":2404,"url":3636},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2213,"url":3638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2253,"url":2895},{"type":2210,"url":3641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2218,"url":2219},{"type":2213,"url":2900},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":161,"slug":3646,"dossier":91,"summary":3647,"aliases":3648,"sourceIds":3651,"published":3652,"modified":3653,"checkedAt":7,"severity":3654,"references":3656,"versionKeys":3665,"packageCount":32,"repositoryCount":2233},"ghsa-5xm2-6676-qcp9-1e22ee95","Pillow: APNG background disposal allocates full canvas before decompression bomb check",[3649,3650],"BIT-pillow-2026-112399","CVE-2026-112399",[161],"2026-10-21T21:17:56Z","2026-10-26T08:56:16.789537980Z",[3655],{"type":2206,"score":2557},[3657,3659,3661,3663,3664],{"type":2210,"url":3658},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xm2-6676-qcp9",{"type":2213,"url":3660},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112399",{"type":2210,"url":3662},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff1acfc54c53502948d0d14121872061df931db48",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":162,"slug":3667,"dossier":47,"summary":3668,"aliases":3669,"sourceIds":3673,"published":3674,"modified":3675,"checkedAt":7,"severity":3676,"references":3680,"versionKeys":3694,"packageCount":32,"repositoryCount":2589},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3670,3671,3672],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[162,3672],"2026-05-04T20:18:27Z","2026-10-19T20:00:04.709097863Z",[3677,3678],{"type":2245,"score":2722},{"type":2206,"score":3679},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3681,3683,3685,3687,3689,3691,3692],{"type":2213,"url":3682},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2213,"url":3684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2210,"url":3686},"https:\u002F\u002Fgithub.com\u002Fdesigncomputer\u002Fmysql_mcp_server\u002Fcommit\u002Fa96549f4a4d65443fd6e9c7f2324fba9a5c80a82",{"type":2210,"url":3688},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcf6de8ca9b23e714aa5310e1c791eda66fc0b670",{"type":2210,"url":3690},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2251.yaml",{"type":2218,"url":2219},{"type":2213,"url":3693},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2226,2227,2228,2229,2230],{"id":163,"slug":3696,"dossier":47,"summary":3697,"aliases":3698,"sourceIds":3702,"published":3703,"modified":3704,"checkedAt":7,"severity":3705,"references":3708,"versionKeys":3724,"packageCount":32,"repositoryCount":2902},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3699,3700,3701],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[163,3701],"2026-07-20T21:08:13Z","2026-09-10T03:51:10.632149522Z",[3706],{"type":2206,"score":3707},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3709,3711,3713,3715,3717,3718,3720,3722],{"type":2210,"url":3710},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2213,"url":3712},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2210,"url":3714},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2210,"url":3716},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2218,"url":2219},{"type":2210,"url":3719},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2218,"url":3721},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2213,"url":3723},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":164,"slug":3726,"dossier":47,"summary":3727,"aliases":3728,"sourceIds":3733,"published":3734,"modified":3735,"checkedAt":7,"severity":3736,"references":3738,"versionKeys":3766,"packageCount":32,"repositoryCount":3774},"ghsa-63cw-57p8-fm3p-01ac35c7","PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files",[3729,3730,3731,3732],"BIT-pytorch-2026-24747","CVE-2026-24747","PYSEC-2026-1856","PYSEC-2026-2286",[164,3732],"2026-01-27T20:10:54Z","2026-11-04T03:15:10.870748916Z",[3737],{"type":2245,"score":2351},[3739,3741,3743,3745,3747,3749,3751,3753,3755,3757,3758,3760,3762,3764],{"type":2213,"url":3740},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2213,"url":3742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24747",{"type":2727,"url":3744},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2213,"url":3746},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2210,"url":3748},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2727,"url":3750},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2213,"url":3752},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2210,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch\u002FPYSEC-2026-1856.yaml",{"type":2210,"url":3756},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2026-2286.yaml",{"type":2218,"url":2734},{"type":2253,"url":3759},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",{"type":2213,"url":3761},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2210,"url":3763},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpytorch",{"type":2210,"url":3765},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",[2746,2747,2748,3767,3768,3769,3770,3771,3772,3773],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu","pypi:torch@2.8.0","pypi:torch@2.9.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu","pypi:torch@2.9.1+cu128",14,{"id":165,"slug":3776,"dossier":47,"summary":3777,"aliases":3778,"sourceIds":3781,"published":3782,"modified":3783,"checkedAt":7,"severity":3784,"references":3790,"versionKeys":3801,"packageCount":32,"repositoryCount":470},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3779,3780],"CVE-2026-34520","PYSEC-2026-2102",[165,3780],"2026-04-01T21:17:00.333Z","2026-09-10T03:50:43.255807027Z",[3785,3787,3788],{"type":2245,"score":3786},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2206,"score":2634},{"type":2206,"score":3789},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3791,3793,3795,3797,3798,3799],{"type":2253,"url":3792},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2213,"url":3794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2253,"url":3796},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2218,"url":2501},{"type":2213,"url":2646},{"type":2210,"url":3800},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2505,2506,2507,2508,2509,2510,2511,2512],{"id":166,"slug":3803,"dossier":47,"summary":3804,"aliases":3805,"sourceIds":3808,"published":3809,"modified":3810,"checkedAt":7,"severity":3811,"references":3814,"versionKeys":3820,"packageCount":32,"repositoryCount":66},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3806,3807],"CVE-2026-54277","PYSEC-2026-2110",[166,3807],"2026-06-15T20:09:16Z","2026-09-10T03:50:48.460120366Z",[3812,3813],{"type":2206,"score":2983},{"type":2245,"score":2329},[3815,3817,3819],{"type":2213,"url":3816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2253,"url":3818},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":167,"slug":3822,"dossier":47,"summary":3823,"aliases":3824,"sourceIds":3828,"published":3829,"modified":3830,"checkedAt":7,"severity":3831,"references":3835,"versionKeys":3846,"packageCount":32,"repositoryCount":2383},"ghsa-654x-cwwv-5j9c-54c66942","Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1",[3825,3826,3827],"BIT-pillow-2026-114501","CVE-2026-114501","PYSEC-2026-4336",[167,3827],"2026-10-21T22:16:49.410Z","2026-10-29T10:56:00.934076155Z",[3832,3833],{"type":2206,"score":2961},{"type":2245,"score":3834},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[3836,3838,3840,3842,3844,3845],{"type":2213,"url":3837},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-654x-cwwv-5j9c",{"type":2213,"url":3839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114501",{"type":2727,"url":3841},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10172",{"type":2253,"url":3843},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F19f64946eb247b973dd4560be7dea3bf979d2e6a",{"type":2218,"url":2219},{"type":2213,"url":2221},[2226,2227,2228,2229,2230,2231,2232],{"id":168,"slug":3848,"dossier":91,"summary":3849,"aliases":3850,"sourceIds":3853,"published":3854,"modified":3855,"checkedAt":7,"severity":3856,"references":3860,"versionKeys":3869,"packageCount":32,"repositoryCount":3874},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3851,3852],"CVE-2026-45409","PYSEC-2026-215",[168,3852],"2026-05-19T14:34:32Z","2026-09-10T03:50:45.700124422Z",[3857,3858],{"type":2245,"score":2430},{"type":2206,"score":3859},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3861,3863,3865,3867],{"type":2213,"url":3862},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2213,"url":3864},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2218,"url":3866},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2210,"url":3868},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3870,3871,3872,3873],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.14","pypi:idna@3.7",22,{"id":169,"slug":3876,"dossier":91,"summary":3877,"aliases":3878,"sourceIds":3881,"published":3882,"modified":3883,"checkedAt":7,"severity":3884,"references":3886,"versionKeys":3895,"packageCount":32,"repositoryCount":2233},"ghsa-65qm-jvmh-6pqg-7925f039","Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS",[3879,3880],"BIT-pillow-2026-112400","CVE-2026-112400",[169],"2026-10-20T20:53:36Z","2026-10-26T08:55:49.781288748Z",[3885],{"type":2206,"score":2557},[3887,3889,3891,3893,3894],{"type":2210,"url":3888},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-65qm-jvmh-6pqg",{"type":2213,"url":3890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112400",{"type":2210,"url":3892},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6faed707cfb760a4cbd726ddc8406f576cf35bf7",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":170,"slug":3897,"dossier":47,"summary":3898,"aliases":3899,"sourceIds":3902,"published":3903,"modified":3904,"checkedAt":7,"severity":3905,"references":3907,"versionKeys":3918,"packageCount":32,"repositoryCount":480},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3900,3901],"CVE-2025-69224","PYSEC-2026-1099",[170,3901],"2026-01-05T22:58:57Z","2026-09-10T03:49:54.440954011Z",[3906],{"type":2206,"score":2634},[3908,3910,3912,3914,3915,3916],{"type":2210,"url":3909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2213,"url":3911},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2253,"url":3913},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":3917},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2505,2506,2507,2508,2509,2510,2511],{"id":171,"slug":3920,"dossier":91,"summary":3921,"aliases":3922,"sourceIds":3924,"published":3925,"modified":3926,"checkedAt":7,"severity":3927,"references":3930,"versionKeys":3939,"packageCount":32,"repositoryCount":2233},"ghsa-69hj-f68j-2879-d34e420d","filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",[3923],"CVE-2026-112909",[171],"2026-10-28T21:08:35Z","2026-10-28T21:15:04.974667790Z",[3928],{"type":2245,"score":3929},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[3931,3933,3935,3936,3937,3938],{"type":2210,"url":3932},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-69hj-f68j-2879",{"type":2213,"url":3934},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112909",{"type":2210,"url":3346},{"type":2210,"url":3348},{"type":2218,"url":3350},{"type":2210,"url":3352},[3940,3941,3942,3943,3944,3354,3355,3356,3357],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0","pypi:filelock@3.20.3",{"id":172,"slug":3946,"dossier":47,"summary":3947,"aliases":3948,"sourceIds":3951,"published":3952,"modified":3953,"checkedAt":7,"severity":3954,"references":3959,"versionKeys":3971,"packageCount":32,"repositoryCount":66},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3949,3950],"CVE-2026-1839","PYSEC-2026-2288",[172,3950],"2026-04-07T06:16:41.490Z","2026-09-10T03:50:43.300048881Z",[3955,3957],{"type":2245,"score":3956},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2245,"score":3958},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3960,3962,3964,3965,3967,3969],{"type":2213,"url":3961},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2253,"url":3963},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2218,"url":2402},{"type":2210,"url":3966},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2404,"url":3968},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2213,"url":3970},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2409,2410,2411,2412,2413,2414,2415,2416,2417],{"id":173,"slug":3973,"dossier":47,"summary":3974,"aliases":3975,"sourceIds":3977,"published":3978,"modified":3979,"checkedAt":7,"severity":3980,"references":3982,"versionKeys":3991,"packageCount":32,"repositoryCount":2589},"ghsa-6cjc-53gc-5rqm-f1beb40a","AIOHTTP: Connector pool exhaustion via Max-Age overflow",[3976],"CVE-2026-111065",[173],"2026-10-20T19:57:24Z","2026-10-20T20:15:05.286053785Z",[3981],{"type":2206,"score":3859},[3983,3985,3987,3989,3990],{"type":2210,"url":3984},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6cjc-53gc-5rqm",{"type":2213,"url":3986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111065",{"type":2210,"url":3988},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9dd8eaf4e31f1237ef2c1574a8c82a739fca5805",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":174,"slug":3993,"dossier":47,"summary":3994,"aliases":3995,"sourceIds":3998,"published":3999,"modified":4000,"checkedAt":7,"severity":4001,"references":4003,"versionKeys":4014,"packageCount":32,"repositoryCount":480},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3996,3997],"CVE-2025-69228","PYSEC-2026-1100",[174,3997],"2026-01-05T23:13:14Z","2026-09-10T03:50:32.839537992Z",[4002],{"type":2206,"score":2983},[4004,4006,4008,4010,4011,4012],{"type":2210,"url":4005},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2213,"url":4007},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2253,"url":4009},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":4013},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2505,2506,2507,2508,2509,2510,2511],{"id":175,"slug":4016,"dossier":47,"summary":4017,"aliases":4018,"sourceIds":4021,"published":4022,"modified":4023,"checkedAt":7,"severity":4024,"references":4027,"versionKeys":4036,"packageCount":32,"repositoryCount":499},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4019,4020],"CVE-2026-53538","PYSEC-2026-3037",[175,4020],"2026-06-15T20:22:25Z","2026-09-10T03:51:07.925895532Z",[4025],{"type":2245,"score":4026},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4028,4030,4031,4032,4034],{"type":2210,"url":4029},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2218,"url":3427},{"type":2218,"url":3429},{"type":2213,"url":4033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2213,"url":4035},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3553,3554,3555,3433],{"id":176,"slug":4038,"dossier":47,"summary":4039,"aliases":4040,"sourceIds":4043,"published":4044,"modified":4045,"checkedAt":7,"severity":4046,"references":4048,"versionKeys":4059,"packageCount":32,"repositoryCount":480},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4041,4042],"CVE-2025-69223","PYSEC-2026-1101",[176,4042],"2026-01-05T22:58:41Z","2026-09-10T03:50:32.830751052Z",[4047],{"type":2245,"score":2329},[4049,4051,4053,4055,4056,4057],{"type":2210,"url":4050},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2213,"url":4052},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2253,"url":4054},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":4058},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2505,2506,2507,2508,2509,2510,2511],{"id":177,"slug":4061,"dossier":91,"summary":4062,"aliases":4063,"sourceIds":4065,"published":4066,"modified":4067,"checkedAt":7,"severity":4068,"references":4071,"versionKeys":4083,"packageCount":32,"repositoryCount":4095},"ghsa-6q48-6c7w-9gw2-05036ff0","certifi bundles emSign root CAs with compromised intermediate CA keys",[4064],"PYSEC-2026-4320",[177,4064],"2026-10-20T19:35:05Z","2026-10-30T14:00:02.590922333Z",[4069],{"type":2206,"score":4070},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4072,4074,4076,4078,4079,4081],{"type":2210,"url":4073},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",{"type":2210,"url":4075},"https:\u002F\u002Fdiscuss.python.org\u002Ft\u002Finformation-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident\u002F109576",{"type":2210,"url":4077},"https:\u002F\u002Femudhra.we-have-a-problem.com\u002F",{"type":2218,"url":2256},{"type":2218,"url":4080},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcertifi",{"type":2213,"url":4082},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6q48-6c7w-9gw2",[4084,2269,4085,4086,4087,4088,4089,4090,4091,4092,4093,4094],"pypi:certifi@2024.12.14","pypi:certifi@2025.1.31","pypi:certifi@2025.10.5","pypi:certifi@2025.11.12","pypi:certifi@2025.4.26","pypi:certifi@2025.6.15","pypi:certifi@2025.8.3","pypi:certifi@2026.1.4","pypi:certifi@2026.2.25","pypi:certifi@2026.4.22","pypi:certifi@2026.6.17",21,{"id":178,"slug":4097,"dossier":47,"summary":4098,"aliases":4099,"sourceIds":4103,"published":4104,"modified":4105,"checkedAt":7,"severity":4106,"references":4108,"versionKeys":4121,"packageCount":32,"repositoryCount":2902},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4100,4101,4102],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[178,4102],"2026-07-14T16:17:01.937Z","2026-09-10T03:51:10.822199342Z",[4107],{"type":2245,"score":2329},[4109,4111,4113,4115,4117,4119,4120],{"type":2404,"url":4110},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2213,"url":4112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2253,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2253,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2210,"url":4118},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2218,"url":2219},{"type":2213,"url":3719},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":179,"slug":4123,"dossier":47,"summary":4124,"aliases":4125,"sourceIds":4128,"published":4129,"modified":4130,"checkedAt":7,"severity":4131,"references":4133,"versionKeys":4144,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4126,4127],"CVE-2024-12720","PYSEC-2026-1982",[179,4127],"2025-03-20T12:32:43Z","2026-08-13T20:11:58.209202163Z",[4132],{"type":2245,"score":3105},[4134,4136,4138,4139,4141,4142],{"type":2213,"url":4135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2210,"url":4137},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2218,"url":2402},{"type":2210,"url":4140},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2218,"url":2771},{"type":2213,"url":4143},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2409],{"id":180,"slug":4146,"dossier":47,"summary":4147,"aliases":4148,"sourceIds":4151,"published":4152,"modified":4153,"checkedAt":7,"severity":4154,"references":4156,"versionKeys":4165,"packageCount":32,"repositoryCount":518},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[4149,4150],"CVE-2026-57585","PYSEC-2026-3625",[180,4150],"2026-06-19T21:42:55Z","2026-09-10T03:51:07.975753919Z",[4155],{"type":2245,"score":2329},[4157,4159,4161,4163],{"type":2213,"url":4158},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2253,"url":4160},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2218,"url":4162},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2210,"url":4164},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[4166,4167,4168],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":181,"slug":4170,"dossier":47,"summary":4171,"aliases":4172,"sourceIds":4175,"published":4176,"modified":4177,"checkedAt":7,"severity":4178,"references":4181,"versionKeys":4194,"packageCount":32,"repositoryCount":103},"ghsa-6vgw-5pg2-w6jp-57c7d3f5","pip Path Traversal vulnerability",[4173,4174],"CVE-2026-1703","PYSEC-2026-1796",[181,4174],"2026-02-02T15:30:34Z","2026-09-10T03:50:34.266257578Z",[4179],{"type":2206,"score":4180},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4182,4184,4186,4188,4189,4191,4192],{"type":2213,"url":4183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1703",{"type":2210,"url":4185},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13777",{"type":2210,"url":4187},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F8e227a9be4faa9594e05d02ca05a413a2a4e7735",{"type":2218,"url":3169},{"type":2210,"url":4190},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FWIEA34D4TABF2UNQJAOMXKCICSPBE2DJ",{"type":2218,"url":3177},{"type":2213,"url":4193},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6vgw-5pg2-w6jp",[3181,3182],{"id":182,"slug":4196,"dossier":91,"summary":4197,"aliases":4198,"sourceIds":4201,"published":4202,"modified":4203,"checkedAt":7,"severity":4204,"references":4206,"versionKeys":4215,"packageCount":32,"repositoryCount":2233},"ghsa-74r2-7ff9-mjj2-9127f170","Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()",[4199,4200],"BIT-pillow-2026-112401","CVE-2026-112401",[182],"2026-10-21T20:42:11Z","2026-10-26T08:56:13.792431880Z",[4205],{"type":2206,"score":3859},[4207,4209,4211,4213,4214],{"type":2210,"url":4208},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-74r2-7ff9-mjj2",{"type":2213,"url":4210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112401",{"type":2210,"url":4212},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F68a3fe957d8a4d552e8c69d96066d749f0614c7e",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":183,"slug":4217,"dossier":47,"summary":4218,"aliases":4219,"sourceIds":4222,"published":4223,"modified":4224,"checkedAt":7,"severity":4225,"references":4228,"versionKeys":4241,"packageCount":32,"repositoryCount":480},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4220,4221],"CVE-2025-66034","PYSEC-2026-1389",[183,4221],"2025-12-01T19:07:00Z","2026-09-10T03:50:31.754255627Z",[4226],{"type":2245,"score":4227},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4229,4231,4233,4235,4237,4239],{"type":2210,"url":4230},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2213,"url":4232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2210,"url":4234},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2218,"url":4236},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2218,"url":4238},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2213,"url":4240},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4242,4243,4244,4245,4246,4247],"pypi:fonttools@4.55.3","pypi:fonttools@4.55.8","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":184,"slug":4249,"dossier":47,"summary":4250,"aliases":4251,"sourceIds":4252,"published":4253,"modified":4254,"checkedAt":7,"severity":4255,"references":4258,"versionKeys":4271,"packageCount":32,"repositoryCount":2683},"ghsa-78g4-xqwv-q3g8-95d38591","Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()",[],[184],"2026-10-22T17:01:08Z","2026-10-22T17:15:04.326552524Z",[4256],{"type":2245,"score":4257},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4259,4261,4263,4265,4267,4268,4269],{"type":2210,"url":4260},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-78g4-xqwv-q3g8",{"type":2210,"url":4262},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5f8114c8096b181fae493543cd3837d9f9a971cc",{"type":2210,"url":4264},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd3470c327840f4c216a1610f30e7091dfd0b97c0",{"type":2210,"url":4266},"https:\u002F\u002Fgithub.com\u002Fuclouvain\u002Fopenjpeg\u002Fcommit\u002F91d08b11a72764f6d199f32fa0c1b1abd4edc2ad",{"type":2218,"url":2219},{"type":2210,"url":2221},{"type":2210,"url":4270},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FOSV-2025-219",[2225,2226,2227,2228,2229,2230,2231,2232],{"id":185,"slug":4273,"dossier":47,"summary":4274,"aliases":4275,"sourceIds":4278,"published":4279,"modified":4280,"checkedAt":7,"severity":4281,"references":4283,"versionKeys":4300,"packageCount":32,"repositoryCount":34},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4276,4277],"CVE-2025-62727","PYSEC-2026-1942",[185,4277],"2025-10-28T20:38:01Z","2026-09-10T03:50:29.490992457Z",[4282],{"type":2245,"score":2329},[4284,4286,4288,4290,4293,4295,4297,4298],{"type":2210,"url":4285},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2213,"url":4287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2253,"url":4289},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4291,"url":4292},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2218,"url":4294},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2210,"url":4296},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2218,"url":2473},{"type":2213,"url":4299},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2478,2479,4301,4302,4303],"pypi:starlette@0.47.3","pypi:starlette@0.48.0","pypi:starlette@0.49.0",{"id":186,"slug":4305,"dossier":47,"summary":4306,"aliases":4307,"sourceIds":4310,"published":4311,"modified":4312,"checkedAt":7,"severity":4313,"references":4316,"versionKeys":4333,"packageCount":32,"repositoryCount":2589},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4308,4309],"CVE-2026-0994","PYSEC-2026-1805",[186,4309],"2026-01-23T15:31:35Z","2026-09-10T03:50:32.795512159Z",[4314],{"type":2206,"score":4315},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4317,4319,4321,4323,4325,4327,4329,4331],{"type":2213,"url":4318},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2210,"url":4320},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2210,"url":4322},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2210,"url":4324},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2210,"url":4326},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2218,"url":4328},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2218,"url":4330},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2213,"url":4332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4334,4335,4336,4337,4338,4339,4340,4341,4342,4343],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.32.1","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":187,"slug":4345,"dossier":91,"summary":4346,"aliases":4347,"sourceIds":4351,"published":4352,"modified":4353,"checkedAt":7,"severity":4354,"references":4357,"versionKeys":4366,"packageCount":32,"repositoryCount":2233},"ghsa-7mwm-ghpf-9vrm-446e4269","Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform",[4348,4349,4350],"BIT-pillow-2026-112402","CVE-2026-112402","PYSEC-2026-4331",[187,4350],"2026-10-19T22:17:07.633Z","2026-10-28T11:10:35.587185673Z",[4355,4356],{"type":2206,"score":2557},{"type":2245,"score":2329},[4358,4360,4362,4364,4365],{"type":2253,"url":4359},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-7mwm-ghpf-9vrm",{"type":2213,"url":4361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112402",{"type":2253,"url":4363},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faafa6c75f7cdabb9f409a8aac7c780bea31d08d9",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":188,"slug":4368,"dossier":47,"summary":4369,"aliases":4370,"sourceIds":4373,"published":4374,"modified":4375,"checkedAt":7,"severity":4376,"references":4379,"versionKeys":4393,"packageCount":32,"repositoryCount":3221},"ghsa-82r6-8w77-94w6-217253d8","AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",[4371,4372],"CVE-2026-63374","PYSEC-2026-4025",[188,4372],"2026-09-18T17:17:18Z","2026-10-01T17:56:11.058322399Z",[4377],{"type":2206,"score":4378},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4380,4382,4384,4386,4387,4388,4389,4391],{"type":2210,"url":4381},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fsecurity\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":2210,"url":4383},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fpull\u002F1208",{"type":2210,"url":4385},"https:\u002F\u002Fgithub.com\u002Fagronholm\u002Fanyio\u002Fcommit\u002F68f58915f82d9be8109ebbbd8f5d70577d43f2ce",{"type":2218,"url":3477},{"type":2210,"url":3479},{"type":2218,"url":3481},{"type":2213,"url":4390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-82r6-8w77-94w6",{"type":2213,"url":4392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63374",[3487,3488,3489,3490,3491,3492,3493,3494],{"id":189,"slug":4395,"dossier":47,"summary":4396,"aliases":4397,"sourceIds":4400,"published":4401,"modified":4402,"checkedAt":7,"severity":4403,"references":4405,"versionKeys":4409,"packageCount":32,"repositoryCount":470},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4398,4399],"CVE-2026-54283","PYSEC-2026-249",[189,4399],"2026-06-15T20:39:53Z","2026-09-10T03:51:08.156199030Z",[4404],{"type":2245,"score":2329},[4406,4408],{"type":2213,"url":4407},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2218,"url":4294},[2477,2478,2479,4301,4302,4303,4410,4411,4412],"pypi:starlette@0.49.3","pypi:starlette@0.50.0","pypi:starlette@1.0.0",{"id":190,"slug":4414,"dossier":47,"summary":4415,"aliases":4416,"sourceIds":4420,"published":4421,"modified":4422,"checkedAt":7,"severity":4423,"references":4426,"versionKeys":4463,"packageCount":32,"repositoryCount":470},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4417,4418,4419],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[190,4418],"2026-05-22T13:10:03Z","2026-09-10T03:51:08.121685407Z",[4424],{"type":2245,"score":4425},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[4427,4429,4431,4433,4435,4437,4439,4441,4443,4445,4446,4448,4451,4453,4455,4457,4459,4461],{"type":2213,"url":4428},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2213,"url":4430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2253,"url":4432},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2210,"url":4434},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2260,"url":4436},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2210,"url":4438},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2210,"url":4440},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2210,"url":4442},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2210,"url":4444},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2218,"url":4294},{"type":2210,"url":4447},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4449,"url":4450},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2210,"url":4452},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2210,"url":4454},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:60520",{"type":2210,"url":4456},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2210,"url":4458},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2260,"url":4460},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2213,"url":4462},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2477,2478,2479,4301,4302,4303,4410,4411,4412],{"id":191,"slug":4465,"dossier":47,"summary":4466,"aliases":4467,"sourceIds":4470,"published":4471,"modified":4472,"checkedAt":7,"severity":4473,"references":4476,"versionKeys":4487,"packageCount":32,"repositoryCount":2622},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[4468,4469],"CVE-2026-21860","PYSEC-2026-2044",[191,4469],"2026-01-08T19:51:21Z","2026-09-10T03:50:32.862525778Z",[4474,4475],{"type":2245,"score":2430},{"type":2206,"score":2305},[4477,4479,4481,4483,4484,4485],{"type":2210,"url":4478},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":2213,"url":4480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":2210,"url":4482},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":2218,"url":2439},{"type":2218,"url":2543},{"type":2213,"url":4486},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[2443,2444,2445,2446],{"id":192,"slug":4489,"dossier":47,"summary":4490,"aliases":4491,"sourceIds":4495,"published":4496,"modified":4497,"checkedAt":7,"severity":4498,"references":4502,"versionKeys":4524,"packageCount":32,"repositoryCount":480},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4492,4493,4494],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[192,4494],"2025-04-16T21:30:59Z","2026-09-10T03:50:23.660138570Z",[4499,4500],{"type":2245,"score":2718},{"type":2206,"score":4501},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4503,4505,4507,4509,4511,4513,4514,4516,4518,4520,4522],{"type":2213,"url":4504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2210,"url":4506},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2210,"url":4508},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2210,"url":4510},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2210,"url":4512},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2218,"url":2734},{"type":2210,"url":4515},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2210,"url":4517},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2210,"url":4519},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2218,"url":4521},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2213,"url":4523},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2746,2747,2748,3767,3768],{"id":193,"slug":4526,"dossier":91,"summary":4527,"aliases":4528,"sourceIds":4531,"published":4532,"modified":4533,"checkedAt":7,"severity":4534,"references":4537,"versionKeys":4554,"packageCount":32,"repositoryCount":3874},"ghsa-8988-9cw3-xx77-ee9c660c","urllib3: HTTPS proxy TLS configuration may be ignored or overridden",[4529,4530],"CVE-2026-97687","PYSEC-2026-4175",[193,4530],"2026-09-30T14:46:04Z","2026-10-01T17:55:53.793608550Z",[4535],{"type":2206,"score":4536},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4538,4540,4542,4544,4546,4548,4549,4551,4552],{"type":2210,"url":4539},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",{"type":2213,"url":4541},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97687",{"type":2210,"url":4543},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F5093",{"type":2210,"url":4545},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F07408cec79d1856d81bb42c74a904a24fdb9e465",{"type":2210,"url":4547},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fb6447295fff7b38fdffc67e0df9712d60cef3cc3",{"type":2218,"url":2674},{"type":2210,"url":4550},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.8.0",{"type":2218,"url":2676},{"type":2213,"url":4553},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8988-9cw3-xx77",[2678,2679,2680,2681,2682,4555,4556],"pypi:urllib3@2.6.3","pypi:urllib3@2.7.0",{"id":194,"slug":4558,"dossier":47,"summary":4559,"aliases":4560,"sourceIds":4564,"published":4565,"modified":4566,"checkedAt":7,"severity":4567,"references":4570,"versionKeys":4578,"packageCount":32,"repositoryCount":2233},"ghsa-8g5g-8vmr-9782-3b73f6ca","Pillow: Heap buffer overflow in ImagingJpegDecode",[4561,4562,4563],"BIT-pillow-2026-112403","CVE-2026-112403","PYSEC-2026-4332",[194,4563],"2026-10-19T22:17:07.770Z","2026-10-28T11:10:51.788355157Z",[4568,4569],{"type":2206,"score":3610},{"type":2245,"score":3236},[4571,4573,4575,4576,4577],{"type":2404,"url":4572},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8g5g-8vmr-9782",{"type":2213,"url":4574},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112403",{"type":2253,"url":3618},{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":195,"slug":4580,"dossier":47,"summary":4581,"aliases":4582,"sourceIds":4584,"published":4585,"modified":4586,"checkedAt":7,"severity":4587,"references":4590,"versionKeys":4597,"packageCount":32,"repositoryCount":2233},"ghsa-8mx5-7m5m-r77g-03e425ff","filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",[4583],"CVE-2026-112910",[195],"2026-10-28T21:08:55Z","2026-10-28T21:15:05.688436299Z",[4588],{"type":2245,"score":4589},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[4591,4593,4594,4595,4596],{"type":2210,"url":4592},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-8mx5-7m5m-r77g",{"type":2210,"url":3346},{"type":2210,"url":3348},{"type":2218,"url":3350},{"type":2210,"url":3352},[3940,3941,3942,3943,3944,3354,3355,3356,3357],{"id":196,"slug":4599,"dossier":47,"summary":4600,"aliases":4601,"sourceIds":4604,"published":4605,"modified":4606,"checkedAt":7,"severity":4607,"references":4609,"versionKeys":4628,"packageCount":32,"repositoryCount":103},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4602,4603],"CVE-2025-4565","PYSEC-2026-1806",[196,4603],"2025-06-16T16:02:58Z","2026-09-10T03:50:25.255076549Z",[4608],{"type":2206,"score":2207},[4610,4612,4614,4616,4618,4619,4621,4623,4625,4626],{"type":2210,"url":4611},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2210,"url":4613},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2213,"url":4615},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2210,"url":4617},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2218,"url":4328},{"type":2210,"url":4620},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2210,"url":4622},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2210,"url":4624},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2218,"url":4330},{"type":2213,"url":4627},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4334,4336,4337],{"id":197,"slug":4630,"dossier":47,"summary":4631,"aliases":4632,"sourceIds":4636,"published":4637,"modified":4638,"checkedAt":7,"severity":4639,"references":4641,"versionKeys":4651,"packageCount":32,"repositoryCount":2902},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[4633,4634,4635],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[197,4635],"2026-07-06T19:17:08.127Z","2026-09-10T03:51:11.229114807Z",[4640],{"type":2245,"score":2329},[4642,4644,4646,4647,4649,4650],{"type":2404,"url":4643},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2213,"url":4645},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2253,"url":2895},{"type":2210,"url":4648},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2218,"url":2219},{"type":2213,"url":2900},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":198,"slug":4653,"dossier":47,"summary":4654,"aliases":4655,"sourceIds":4658,"published":4659,"modified":4660,"checkedAt":7,"severity":4661,"references":4663,"versionKeys":4676,"packageCount":32,"repositoryCount":518},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4656,4657],"CVE-2025-5197","PYSEC-2026-1983",[198,4657],"2025-08-06T12:31:20Z","2026-09-10T03:50:26.988216861Z",[4662],{"type":2245,"score":3105},[4664,4666,4668,4670,4671,4673,4674],{"type":2213,"url":4665},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2210,"url":4667},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2210,"url":4669},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2218,"url":2402},{"type":2210,"url":4672},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2218,"url":2771},{"type":2213,"url":4675},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2409,2410,2411,2412],{"id":199,"slug":4678,"dossier":47,"summary":4679,"aliases":4680,"sourceIds":4683,"published":4684,"modified":4685,"checkedAt":7,"severity":4686,"references":4689,"versionKeys":4700,"packageCount":32,"repositoryCount":518},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[4681,4682],"CVE-2025-53643","PYSEC-2026-1104",[199,4682],"2025-07-14T19:33:31Z","2026-09-10T03:50:26.231846188Z",[4687],{"type":2206,"score":4688},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4690,4692,4694,4696,4697,4698],{"type":2210,"url":4691},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2213,"url":4693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2253,"url":4695},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":4699},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2505,2506,2507,2508],{"id":200,"slug":4702,"dossier":47,"summary":4703,"aliases":4704,"sourceIds":4707,"published":4708,"modified":4709,"checkedAt":7,"severity":4710,"references":4713,"versionKeys":4722,"packageCount":32,"repositoryCount":470},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[4705,4706],"CVE-2026-34518","PYSEC-2026-2100",[200,4706],"2026-04-01T21:17:00.020Z","2026-09-10T03:51:01.374434696Z",[4711,4712],{"type":2245,"score":3834},{"type":2206,"score":3259},[4714,4716,4718,4720,4721],{"type":2253,"url":4715},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2213,"url":4717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2253,"url":4719},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":201,"slug":4724,"dossier":47,"summary":4725,"aliases":4726,"sourceIds":4729,"published":4730,"modified":4731,"checkedAt":7,"severity":4732,"references":4735,"versionKeys":4758,"packageCount":32,"repositoryCount":480},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4727,4728],"CVE-2024-47081","PYSEC-2026-1872",[201,4728],"2025-06-09T19:06:08Z","2026-10-19T20:00:04.716114530Z",[4733],{"type":2245,"score":4734},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4736,4738,4740,4742,4744,4746,4748,4750,4752,4754,4756],{"type":2210,"url":4737},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2213,"url":4739},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2210,"url":4741},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2253,"url":4743},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2213,"url":4745},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2218,"url":4747},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2210,"url":4749},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.32.4",{"type":2210,"url":4751},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Frequests\u002FPYSEC-2026-1872.yaml",{"type":2218,"url":4753},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2210,"url":4755},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2210,"url":4757},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",[4759,4760],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":202,"slug":4762,"dossier":47,"summary":4763,"aliases":4764,"sourceIds":4768,"published":4769,"modified":4770,"checkedAt":7,"severity":4771,"references":4773,"versionKeys":4786,"packageCount":32,"repositoryCount":2902},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[4765,4766,4767],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[202,4767],"2026-07-14T16:17:02.370Z","2026-09-10T03:51:11.334365483Z",[4772],{"type":2245,"score":2329},[4774,4776,4778,4780,4782,4784,4785],{"type":2404,"url":4775},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2213,"url":4777},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2253,"url":4779},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2253,"url":4781},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2210,"url":4783},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2218,"url":2219},{"type":2213,"url":3719},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":203,"slug":4788,"dossier":47,"summary":4789,"aliases":4790,"sourceIds":4794,"published":4795,"modified":4796,"checkedAt":7,"severity":4797,"references":4802,"versionKeys":4813,"packageCount":32,"repositoryCount":2233},"ghsa-9v9v-9qvf-h2hj-0344c250","Pillow: Heap over-read in WMF\u002FEMF rendering via 16-bit dimension truncation (Windows builds)",[4791,4792,4793],"BIT-pillow-2026-96644","CVE-2026-96644","PYSEC-2026-4343",[203,4793],"2026-10-21T21:20:32.943Z","2026-10-29T10:55:35.129178084Z",[4798,4800],{"type":2206,"score":4799},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":4801},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4803,4805,4807,4809,4811,4812],{"type":2213,"url":4804},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9v9v-9qvf-h2hj",{"type":2213,"url":4806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96644",{"type":2727,"url":4808},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10120",{"type":2253,"url":4810},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4cf46bee338304c5c8968fd7f132ba0d40c428b7",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":204,"slug":4815,"dossier":47,"summary":4816,"aliases":4817,"sourceIds":4819,"published":4820,"modified":4821,"checkedAt":7,"severity":4822,"references":4824,"versionKeys":4833,"packageCount":32,"repositoryCount":2622},"ghsa-9vhv-jxww-xfm5-e19a009a","filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",[4818],"CVE-2026-112913",[204],"2026-10-23T22:28:19Z","2026-10-23T22:45:03.439584635Z",[4823],{"type":2245,"score":2718},[4825,4827,4829,4831,4832],{"type":2210,"url":4826},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-9vhv-jxww-xfm5",{"type":2210,"url":4828},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F834",{"type":2210,"url":4830},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F5e3f2ec0c5fb17cb2635b60b2b68bc63ab81ca2d",{"type":2218,"url":3350},{"type":2210,"url":3352},[3354,3355,3356,3357],{"id":205,"slug":4835,"dossier":47,"summary":4836,"aliases":4837,"sourceIds":4840,"published":4841,"modified":4842,"checkedAt":7,"severity":4843,"references":4846,"versionKeys":4863,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4838,4839],"CVE-2024-35195","PYSEC-2026-1873",[205,4839],"2024-05-20T20:15:00Z","2026-09-10T03:50:13.740879755Z",[4844],{"type":2245,"score":4845},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4847,4849,4851,4853,4855,4856,4858,4860,4861],{"type":2210,"url":4848},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2213,"url":4850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2210,"url":4852},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2253,"url":4854},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2218,"url":4747},{"type":2210,"url":4857},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2210,"url":4859},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2218,"url":4753},{"type":2213,"url":4862},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4759],{"id":206,"slug":4865,"dossier":47,"summary":4866,"aliases":4867,"sourceIds":4870,"published":4871,"modified":4872,"checkedAt":7,"severity":4873,"references":4877,"versionKeys":4883,"packageCount":32,"repositoryCount":66},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4868,4869],"CVE-2026-54280","PYSEC-2026-2113",[206,4869],"2026-06-15T20:10:44Z","2026-09-10T03:50:55.382836820Z",[4874,4876],{"type":2206,"score":4875},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":2329},[4878,4880,4882],{"type":2213,"url":4879},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2253,"url":4881},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":207,"slug":4885,"dossier":47,"summary":4886,"aliases":4887,"sourceIds":4889,"published":4890,"modified":4891,"checkedAt":7,"severity":4892,"references":4894,"versionKeys":4903,"packageCount":32,"repositoryCount":2589},"ghsa-9xw5-w5jj-pvcg-5b93a500","AIOHTTP: File descriptor exhaustion in multipart requests",[4888],"CVE-2026-111066",[207],"2026-10-20T19:52:09Z","2026-10-20T20:00:04.692319554Z",[4893],{"type":2206,"score":2207},[4895,4897,4899,4901,4902],{"type":2210,"url":4896},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9xw5-w5jj-pvcg",{"type":2213,"url":4898},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111066",{"type":2210,"url":4900},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2d94633b7f1b4c1ba07d647b629a8440652b2d09",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":208,"slug":4905,"dossier":47,"summary":4906,"aliases":4907,"sourceIds":4910,"published":4911,"modified":4912,"checkedAt":7,"severity":4913,"references":4917,"versionKeys":4928,"packageCount":32,"repositoryCount":470},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4908,4909],"CVE-2026-34525","PYSEC-2026-2103",[208,4909],"2026-04-01T21:17:00.490Z","2026-09-10T03:51:01.505705751Z",[4914,4916],{"type":2206,"score":4915},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2245,"score":2636},[4918,4920,4922,4924,4926,4927],{"type":2253,"url":4919},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2213,"url":4921},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2253,"url":4923},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2253,"url":4925},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":209,"slug":4930,"dossier":47,"summary":4931,"aliases":4932,"sourceIds":4936,"published":4937,"modified":4938,"checkedAt":7,"severity":4939,"references":4944,"versionKeys":4960,"packageCount":32,"repositoryCount":380},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4933,4934,4935],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[209],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4940,4942],{"type":2245,"score":4941},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2206,"score":4943},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4945,4947,4949,4951,4952,4954,4956,4958],{"type":2213,"url":4946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2210,"url":4948},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2210,"url":4950},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2218,"url":2734},{"type":2210,"url":4953},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2210,"url":4955},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2210,"url":4957},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2210,"url":4959},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2746,2747],{"id":210,"slug":4962,"dossier":47,"summary":4963,"aliases":4964,"sourceIds":4967,"published":4968,"modified":4969,"checkedAt":7,"severity":4970,"references":4973,"versionKeys":4982,"packageCount":32,"repositoryCount":2233},"ghsa-c6hw-5grf-ff96-1e7aec72","Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels",[4965,4966],"BIT-pillow-2026-112404","CVE-2026-112404",[210],"2026-10-20T20:42:00Z","2026-10-26T08:55:55.669563065Z",[4971],{"type":2206,"score":4972},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4974,4976,4978,4980,4981],{"type":2210,"url":4975},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-c6hw-5grf-ff96",{"type":2213,"url":4977},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112404",{"type":2210,"url":4979},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":211,"slug":4984,"dossier":47,"summary":4985,"aliases":4986,"sourceIds":4990,"published":4991,"modified":4992,"checkedAt":7,"severity":4993,"references":4997,"versionKeys":5037,"packageCount":32,"repositoryCount":3221},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4987,4988,4989],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[211,4989],"2026-02-11T14:22:50Z","2026-09-10T03:50:59.393816085Z",[4994,4996],{"type":2206,"score":4995},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":2329},[4998,5000,5002,5004,5006,5008,5009,5011,5013,5015,5017,5019,5021,5023,5025,5027,5029,5031,5033,5035],{"type":2210,"url":4999},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2213,"url":5001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2210,"url":5003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2210,"url":5005},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2210,"url":5007},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2218,"url":2219},{"type":2210,"url":5010},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2210,"url":5012},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2210,"url":5014},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2213,"url":5016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2213,"url":5018},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2213,"url":5020},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2213,"url":5022},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2213,"url":5024},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2213,"url":5026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2213,"url":5028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2213,"url":5030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2213,"url":5032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2213,"url":5034},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2213,"url":5036},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2223,2224,2225,2226,2227,2228,2229],{"id":212,"slug":5039,"dossier":47,"summary":5040,"aliases":5041,"sourceIds":5044,"published":5045,"modified":5046,"checkedAt":7,"severity":5047,"references":5049,"versionKeys":5060,"packageCount":32,"repositoryCount":32},"ghsa-cgwc-pv48-fhj5-6739bcab","python-engineio has unbound thread allocation that can cause denial of service",[5042,5043],"CVE-2026-48802","PYSEC-2026-3032",[212,5043],"2026-06-26T20:51:37Z","2026-07-13T16:42:35.099677221Z",[5048],{"type":2245,"score":2329},[5050,5052,5054,5056,5058],{"type":2210,"url":5051},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":2218,"url":5053},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio",{"type":2218,"url":5055},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-engineio",{"type":2213,"url":5057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cgwc-pv48-fhj5",{"type":2213,"url":5059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48802",[5061],"pypi:python-engineio@4.12.3",{"id":213,"slug":5063,"dossier":47,"summary":5064,"aliases":5065,"sourceIds":5069,"published":5070,"modified":5071,"checkedAt":7,"severity":5072,"references":5075,"versionKeys":5084,"packageCount":32,"repositoryCount":499},"ghsa-cp9v-662q-vvx9-b0a60d48","Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0",[5066,5067,5068],"BIT-pillow-2026-112405","CVE-2026-112405","PYSEC-2026-4333",[213,5068],"2026-10-19T22:17:08.027Z","2026-10-28T11:10:36.014536437Z",[5073,5074],{"type":2206,"score":2557},{"type":2245,"score":2329},[5076,5078,5080,5082,5083],{"type":2404,"url":5077},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cp9v-662q-vvx9",{"type":2213,"url":5079},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112405",{"type":2253,"url":5081},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb6ee66e8b2c2c0932bdf65f963268d9f2927ef86",{"type":2218,"url":2219},{"type":2213,"url":2221},[2228,2229,2230,2231,2232],{"id":214,"slug":5086,"dossier":47,"summary":5087,"aliases":5088,"sourceIds":5091,"published":5092,"modified":5093,"checkedAt":7,"severity":5094,"references":5097,"versionKeys":5114,"packageCount":32,"repositoryCount":380},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5089,5090],"CVE-2025-27516","PYSEC-2026-1471",[214,5090],"2025-03-05T20:40:14Z","2026-09-10T03:49:48.526758681Z",[5095],{"type":2206,"score":5096},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5098,5100,5102,5104,5106,5108,5110,5112],{"type":2210,"url":5099},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2213,"url":5101},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2253,"url":5103},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2218,"url":5105},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2210,"url":5107},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2210,"url":5109},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2218,"url":5111},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2213,"url":5113},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5115,5116],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":215,"slug":5118,"dossier":47,"summary":5119,"aliases":5120,"sourceIds":5123,"published":5124,"modified":5125,"checkedAt":7,"severity":5126,"references":5128,"versionKeys":5143,"packageCount":32,"repositoryCount":42},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[5121,5122],"CVE-2026-69244","PYSEC-2026-3545",[215,5122],"2026-08-03T20:51:13Z","2026-09-10T03:51:13.983479281Z",[5127],{"type":2206,"score":2813},[5129,5131,5133,5135,5136,5138,5139,5141],{"type":2210,"url":5130},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2210,"url":5132},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2210,"url":5134},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2218,"url":2501},{"type":2210,"url":5137},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2218,"url":3269},{"type":2213,"url":5140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2213,"url":5142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587],{"id":216,"slug":5145,"dossier":47,"summary":5146,"aliases":5147,"sourceIds":5149,"published":5150,"modified":5151,"checkedAt":7,"severity":5152,"references":5154,"versionKeys":5163,"packageCount":32,"repositoryCount":2622},"ghsa-cwqr-hh33-gh44-4ee53d3a","filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",[5148],"CVE-2026-112915",[216],"2026-10-28T21:08:49Z","2026-10-28T21:15:04.923553251Z",[5153],{"type":2245,"score":2722},[5155,5157,5159,5160,5161,5162],{"type":2210,"url":5156},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-cwqr-hh33-gh44",{"type":2213,"url":5158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112915",{"type":2210,"url":4828},{"type":2210,"url":4830},{"type":2218,"url":3350},{"type":2210,"url":3352},[3354,3355,3356,3357],{"id":217,"slug":5165,"dossier":47,"summary":5166,"aliases":5167,"sourceIds":5171,"published":5172,"modified":5173,"checkedAt":7,"severity":5174,"references":5178,"versionKeys":5194,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5168,5169,5170],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[217,5170],"2024-07-15T03:30:57Z","2026-09-10T03:50:16.663495061Z",[5175,5176],{"type":2245,"score":2351},{"type":2206,"score":5177},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5179,5181,5183,5185,5186,5188,5190,5192],{"type":2213,"url":5180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2210,"url":5182},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2210,"url":5184},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2218,"url":3522},{"type":2210,"url":5187},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2210,"url":5189},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2218,"url":5191},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2213,"url":5193},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3528],{"id":218,"slug":5196,"dossier":47,"summary":5197,"aliases":5198,"sourceIds":5201,"published":5202,"modified":5203,"checkedAt":7,"severity":5204,"references":5206,"versionKeys":5215,"packageCount":32,"repositoryCount":2233},"ghsa-f2g6-542v-9j58-1b810101","Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle",[5199,5200],"BIT-pillow-2026-112406","CVE-2026-112406",[218],"2026-10-21T21:21:07Z","2026-10-26T08:56:13.538142549Z",[5205],{"type":2206,"score":2557},[5207,5209,5211,5213,5214],{"type":2210,"url":5208},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-f2g6-542v-9j58",{"type":2213,"url":5210},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112406",{"type":2210,"url":5212},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb3ebf20c694f2f12537a629c30229a1d5a53f777",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":219,"slug":5217,"dossier":47,"summary":5218,"aliases":5219,"sourceIds":5223,"published":5224,"modified":5225,"checkedAt":7,"severity":5226,"references":5230,"versionKeys":5248,"packageCount":32,"repositoryCount":380},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5220,5221,5222],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[219],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5227,5228],{"type":2245,"score":4589},{"type":2206,"score":5229},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5231,5233,5235,5237,5239,5241,5242,5244,5246],{"type":2213,"url":5232},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2210,"url":5234},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2210,"url":5236},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2210,"url":5238},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2210,"url":5240},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2218,"url":2734},{"type":2210,"url":5243},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2210,"url":5245},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2210,"url":5247},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2746,2747],{"id":220,"slug":5250,"dossier":47,"summary":5251,"aliases":5252,"sourceIds":5255,"published":5256,"modified":5257,"checkedAt":7,"severity":5258,"references":5262,"versionKeys":5273,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[5253,5254],"CVE-2024-47874","PYSEC-2026-1943",[220,5254],"2024-10-15T18:12:57Z","2026-09-10T03:50:19.756287586Z",[5259,5261],{"type":2245,"score":5260},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2206,"score":2557},[5263,5265,5267,5269,5270,5271],{"type":2210,"url":5264},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2213,"url":5266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2253,"url":5268},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2218,"url":2467},{"type":2218,"url":2473},{"type":2213,"url":5272},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2477],{"id":221,"slug":5275,"dossier":47,"summary":5276,"aliases":5277,"sourceIds":5280,"published":5281,"modified":5282,"checkedAt":7,"severity":5283,"references":5286,"versionKeys":5301,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[5278,5279],"CVE-2024-49766","PYSEC-2026-2045",[221,5279],"2024-10-25T19:43:41Z","2026-09-10T03:50:19.894904779Z",[5284],{"type":2206,"score":5285},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5287,5289,5291,5293,5294,5296,5298,5299],{"type":2210,"url":5288},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":2213,"url":5290},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":2253,"url":5292},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":2218,"url":2439},{"type":2210,"url":5295},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":2210,"url":5297},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":2218,"url":2543},{"type":2213,"url":5300},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[2443],{"id":222,"slug":5303,"dossier":47,"summary":5304,"aliases":5305,"sourceIds":5307,"published":5308,"modified":5309,"checkedAt":7,"severity":5310,"references":5313,"versionKeys":5322,"packageCount":32,"repositoryCount":2589},"ghsa-f9xw-jh8m-3mwq-43205cf6","AIOHTTP: Absolute-form request targets can spoof Request.scheme",[5306],"CVE-2026-111748",[222],"2026-10-20T20:01:40Z","2026-10-20T20:15:05.218624757Z",[5311],{"type":2206,"score":5312},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5314,5316,5318,5320,5321],{"type":2210,"url":5315},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-f9xw-jh8m-3mwq",{"type":2213,"url":5317},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111748",{"type":2210,"url":5319},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6d4e7b01f9b951aa084a75d7356e907d4ee80411",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":223,"slug":5324,"dossier":47,"summary":5325,"aliases":5326,"sourceIds":5329,"published":5330,"modified":5331,"checkedAt":7,"severity":5332,"references":5334,"versionKeys":5342,"packageCount":32,"repositoryCount":2233},"ghsa-fc9g-5qg7-mf45-6ce92387","Pillow: Quadratic GIF comment copying during save",[5327,5328],"BIT-pillow-2026-112891","CVE-2026-112891",[223],"2026-10-21T20:38:43Z","2026-10-26T08:56:06.483214483Z",[5333],{"type":2206,"score":3859},[5335,5337,5339,5340,5341],{"type":2210,"url":5336},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fc9g-5qg7-mf45",{"type":2213,"url":5338},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112891",{"type":2210,"url":4212},{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":224,"slug":5344,"dossier":47,"summary":5345,"aliases":5346,"sourceIds":5349,"published":5350,"modified":5351,"checkedAt":7,"severity":5352,"references":5357,"versionKeys":5381,"packageCount":32,"repositoryCount":66},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[5347,5348],"CVE-2026-5241","PYSEC-2026-2290",[224,5348],"2026-06-03T14:16:46.337Z","2026-09-10T03:50:49.345942449Z",[5353,5355],{"type":2245,"score":5354},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2245,"score":5356},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5358,5360,5362,5364,5366,5368,5370,5372,5373,5375,5377,5379],{"type":2213,"url":5359},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2253,"url":5361},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2213,"url":5363},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2213,"url":5365},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2210,"url":5367},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2210,"url":5369},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2727,"url":5371},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2218,"url":2402},{"type":2210,"url":5374},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2404,"url":5376},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2210,"url":5378},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2213,"url":5380},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2409,2410,2411,2412,2413,2414,2415,2416,2417],{"id":225,"slug":5383,"dossier":47,"summary":5384,"aliases":5385,"sourceIds":5388,"published":5389,"modified":5390,"checkedAt":7,"severity":5391,"references":5394,"versionKeys":5405,"packageCount":32,"repositoryCount":480},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[5386,5387],"CVE-2025-69230","PYSEC-2026-1105",[225,5387],"2026-01-05T23:13:46Z","2026-09-10T03:50:33.047685052Z",[5392],{"type":2206,"score":5393},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5395,5397,5399,5401,5402,5403],{"type":2210,"url":5396},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2213,"url":5398},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2253,"url":5400},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":5404},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2505,2506,2507,2508,2509,2510,2511],{"id":226,"slug":5407,"dossier":47,"summary":5408,"aliases":5409,"sourceIds":5413,"published":5414,"modified":5415,"checkedAt":7,"severity":5416,"references":5419,"versionKeys":5433,"packageCount":32,"repositoryCount":2902},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[5410,5411,5412],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[226,5412],"2026-07-20T23:09:36Z","2026-09-10T03:50:51.891240357Z",[5417],{"type":2245,"score":5418},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5420,5422,5424,5426,5428,5429,5430,5431],{"type":2210,"url":5421},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2213,"url":5423},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2210,"url":5425},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2210,"url":5427},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2218,"url":2219},{"type":2210,"url":3719},{"type":2218,"url":3721},{"type":2213,"url":5432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":227,"slug":5435,"dossier":47,"summary":4124,"aliases":5436,"sourceIds":5439,"published":5440,"modified":5441,"checkedAt":7,"severity":5442,"references":5445,"versionKeys":5456,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5437,5438],"CVE-2025-1194","PYSEC-2026-1984",[227,5438],"2025-04-29T12:30:21Z","2026-08-13T20:11:58.399313771Z",[5443],{"type":2245,"score":5444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5446,5448,5450,5451,5453,5454],{"type":2213,"url":5447},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2210,"url":5449},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2218,"url":2402},{"type":2210,"url":5452},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2218,"url":2771},{"type":2213,"url":5455},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2409],{"id":228,"slug":5458,"dossier":47,"summary":5459,"aliases":5460,"sourceIds":5462,"published":5463,"modified":5464,"checkedAt":7,"severity":5465,"references":5468,"versionKeys":5479,"packageCount":32,"repositoryCount":2622},"ghsa-fq56-3cx3-fjxp-d2885806","filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",[5461],"CVE-2026-112935",[228],"2026-10-28T21:08:08Z","2026-10-28T21:15:04.933315565Z",[5466],{"type":2245,"score":5467},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5469,5471,5473,5475,5477,5478],{"type":2210,"url":5470},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-fq56-3cx3-fjxp",{"type":2213,"url":5472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112935",{"type":2210,"url":5474},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F843",{"type":2210,"url":5476},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F740ff666b62a88496c8d7394e4e6230605e4d62b",{"type":2218,"url":3350},{"type":2210,"url":3352},[3354,3355,3356,3357],{"id":229,"slug":5481,"dossier":47,"summary":5482,"aliases":5483,"sourceIds":5486,"published":5487,"modified":5488,"checkedAt":7,"severity":5489,"references":5492,"versionKeys":5498,"packageCount":32,"repositoryCount":66},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[5484,5485],"CVE-2026-54278","PYSEC-2026-2111",[229,5485],"2026-06-15T20:09:51Z","2026-09-10T03:51:08.751749295Z",[5490,5491],{"type":2206,"score":2983},{"type":2245,"score":2329},[5493,5495,5496],{"type":2213,"url":5494},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2218,"url":2501},{"type":2253,"url":5497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":230,"slug":5500,"dossier":47,"summary":5501,"aliases":5502,"sourceIds":5506,"published":5507,"modified":5508,"checkedAt":7,"severity":5509,"references":5512,"versionKeys":5523,"packageCount":32,"repositoryCount":2683},"ghsa-g4qv-2jxx-769h-01f137f2","Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic time",[5503,5504,5505],"BIT-pillow-2026-96643","CVE-2026-96643","PYSEC-2026-4342",[230,5505],"2026-10-21T21:20:32.797Z","2026-10-29T10:55:44.091799759Z",[5510,5511],{"type":2206,"score":2813},{"type":2245,"score":2281},[5513,5515,5517,5519,5521,5522],{"type":2213,"url":5514},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g4qv-2jxx-769h",{"type":2213,"url":5516},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96643",{"type":2727,"url":5518},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10073",{"type":2253,"url":5520},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F806e38381c781f32bbd22f4cd026678acd40fd6c",{"type":2218,"url":2219},{"type":2213,"url":2221},[2225,2226,2227,2228,2229,2230,2231,2232],{"id":231,"slug":5525,"dossier":47,"summary":2420,"aliases":5526,"sourceIds":5529,"published":5530,"modified":5531,"checkedAt":7,"severity":5532,"references":5534,"versionKeys":5549,"packageCount":32,"repositoryCount":34},"ghsa-g6x2-hccm-hh4m-e6759829",[5527,5528],"CVE-2026-102598","PYSEC-2026-4312",[231,5528],"2026-10-05T23:48:39Z","2026-10-15T14:56:11.020811348Z",[5533],{"type":2206,"score":2305},[5535,5537,5539,5541,5543,5544,5546,5547],{"type":2210,"url":5536},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-g6x2-hccm-hh4m",{"type":2213,"url":5538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-102598",{"type":2210,"url":5540},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fpull\u002F3309",{"type":2210,"url":5542},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F8d77320bcdf3a34941ec06dcf16b03c065cd21b6",{"type":2218,"url":2439},{"type":2210,"url":5545},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.9",{"type":2218,"url":2543},{"type":2213,"url":5548},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6x2-hccm-hh4m",[2443,2444,2445,2446,2447],{"id":232,"slug":5551,"dossier":47,"summary":5552,"aliases":5553,"sourceIds":5556,"published":5557,"modified":5558,"checkedAt":7,"severity":5559,"references":5562,"versionKeys":5573,"packageCount":32,"repositoryCount":2233},"ghsa-g7cr-3p24-7wf7-568f0c0a","Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer",[5554,5555],"BIT-pillow-2026-96778","CVE-2026-96778",[232],"2026-10-22T16:05:39Z","2026-10-29T10:56:05.933422167Z",[5560],{"type":2206,"score":5561},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5563,5565,5567,5569,5571,5572],{"type":2210,"url":5564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g7cr-3p24-7wf7",{"type":2213,"url":5566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96778",{"type":2210,"url":5568},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10124",{"type":2210,"url":5570},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F02561b8dc6117d5670d4b469fecdd02c70854f9b",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":233,"slug":5575,"dossier":47,"summary":5576,"aliases":5577,"sourceIds":5580,"published":5581,"modified":5582,"checkedAt":7,"severity":5583,"references":5586,"versionKeys":5605,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5578,5579],"CVE-2024-34062","PYSEC-2026-1976",[233,5579],"2024-05-03T19:33:28Z","2026-09-10T03:50:13.776534451Z",[5584],{"type":2245,"score":5585},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5587,5589,5591,5593,5595,5597,5599,5601,5603],{"type":2210,"url":5588},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2213,"url":5590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2210,"url":5592},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2218,"url":5594},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2210,"url":5596},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2210,"url":5598},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2210,"url":5600},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2218,"url":5602},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2213,"url":5604},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5606],"pypi:tqdm@4.66.2",{"id":234,"slug":5608,"dossier":47,"summary":5609,"aliases":5610,"sourceIds":5614,"published":5615,"modified":5616,"checkedAt":7,"severity":5617,"references":5620,"versionKeys":5631,"packageCount":32,"repositoryCount":2233},"ghsa-g842-9rc4-69pw-38a3cbdb","Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoS",[5611,5612,5613],"BIT-pillow-2026-96637","CVE-2026-96637","PYSEC-2026-4338",[234,5613],"2026-10-21T21:20:31.927Z","2026-10-29T10:55:56.102454725Z",[5618,5619],{"type":2206,"score":2813},{"type":2245,"score":2281},[5621,5623,5625,5627,5629,5630],{"type":2213,"url":5622},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-g842-9rc4-69pw",{"type":2213,"url":5624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96637",{"type":2727,"url":5626},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10076",{"type":2253,"url":5628},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F7cb0e02389d8aac2a60896a490f572db0b07b841",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":235,"slug":5633,"dossier":47,"summary":5634,"aliases":5635,"sourceIds":5638,"published":5639,"modified":5640,"checkedAt":7,"severity":5641,"references":5643,"versionKeys":5656,"packageCount":32,"repositoryCount":480},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[5636,5637],"CVE-2025-69229","PYSEC-2026-1106",[235,5637],"2026-01-05T23:13:29Z","2026-09-10T03:50:33.073865205Z",[5642],{"type":2206,"score":2983},[5644,5646,5648,5650,5652,5653,5654],{"type":2210,"url":5645},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2213,"url":5647},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2210,"url":5649},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2210,"url":5651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":5655},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2505,2506,2507,2508,2509,2510,2511],{"id":236,"slug":5658,"dossier":47,"summary":5659,"aliases":5660,"sourceIds":5663,"published":5664,"modified":5665,"checkedAt":7,"severity":5666,"references":5671,"versionKeys":5681,"packageCount":32,"repositoryCount":2233},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5661,5662],"CVE-2026-25645","PYSEC-2026-2275",[236,5662],"2026-03-25T16:56:28Z","2026-09-10T03:50:39.207922076Z",[5667,5669],{"type":2245,"score":5668},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2245,"score":5670},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5672,5674,5676,5678,5679],{"type":2213,"url":5673},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2213,"url":5675},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2253,"url":5677},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2218,"url":4747},{"type":2213,"url":5680},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4759,4760,5682,5683],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":237,"slug":5685,"dossier":47,"summary":5686,"aliases":5687,"sourceIds":5690,"published":5691,"modified":5692,"checkedAt":7,"severity":5693,"references":5695,"versionKeys":5704,"packageCount":32,"repositoryCount":2233},"ghsa-gg2r-wvfm-q9rx-9e34ef8d","Pillow: MSP RLE decoder expands a tiny file into unbounded memory",[5688,5689],"BIT-pillow-2026-112892","CVE-2026-112892",[237],"2026-10-21T21:12:56Z","2026-10-26T08:55:54.537605973Z",[5694],{"type":2206,"score":2557},[5696,5698,5700,5702,5703],{"type":2210,"url":5697},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-gg2r-wvfm-q9rx",{"type":2213,"url":5699},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112892",{"type":2210,"url":5701},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F5dcb630b9798efd91929cb873d677aeee6ed0bb3",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":238,"slug":5706,"dossier":47,"summary":5707,"aliases":5708,"sourceIds":5711,"published":5712,"modified":5713,"checkedAt":7,"severity":5714,"references":5716,"versionKeys":5728,"packageCount":32,"repositoryCount":34},"ghsa-gh4c-6fx4-qh6g-a56f6cb1","urllib3: Chunked Deflate streaming can enter an infinite loop",[5709,5710],"CVE-2026-97688","PYSEC-2026-4176",[238,5710],"2026-09-30T15:00:38Z","2026-10-01T17:55:40.608255720Z",[5715],{"type":2206,"score":3859},[5717,5719,5721,5723,5724,5725,5726],{"type":2210,"url":5718},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",{"type":2213,"url":5720},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97688",{"type":2210,"url":5722},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fea2ad7b21a80da3632f80016526a18864586077f",{"type":2218,"url":2674},{"type":2210,"url":4550},{"type":2218,"url":2676},{"type":2213,"url":5727},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh4c-6fx4-qh6g",[4555,4556],{"id":239,"slug":5730,"dossier":47,"summary":5731,"aliases":5732,"sourceIds":5735,"published":5736,"modified":5737,"checkedAt":7,"severity":5738,"references":5740,"versionKeys":5751,"packageCount":32,"repositoryCount":2683},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5733,5734],"CVE-2025-66418","PYSEC-2026-1998",[239,5734],"2025-12-05T18:15:19Z","2026-09-10T03:50:58.741847479Z",[5739],{"type":2206,"score":2659},[5741,5743,5745,5747,5748,5749],{"type":2210,"url":5742},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2213,"url":5744},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2253,"url":5746},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2218,"url":2674},{"type":2218,"url":2676},{"type":2213,"url":5750},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2678,2679,2680,2681,2682],{"id":240,"slug":5753,"dossier":47,"summary":5754,"aliases":5755,"sourceIds":5758,"published":5759,"modified":5760,"checkedAt":7,"severity":5761,"references":5764,"versionKeys":5779,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5756,5757],"CVE-2024-56201","PYSEC-2026-1472",[240,5757],"2024-12-23T17:54:12Z","2026-09-10T03:50:56.152882717Z",[5762,5763],{"type":2245,"score":3509},{"type":2206,"score":5096},[5765,5767,5769,5771,5773,5774,5776,5777],{"type":2210,"url":5766},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2213,"url":5768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2210,"url":5770},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2253,"url":5772},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2218,"url":5105},{"type":2210,"url":5775},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2218,"url":5111},{"type":2213,"url":5778},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5115],{"id":241,"slug":5781,"dossier":47,"summary":5782,"aliases":5783,"sourceIds":5785,"published":5786,"modified":5787,"checkedAt":7,"severity":5788,"references":5791,"versionKeys":5800,"packageCount":32,"repositoryCount":2589},"ghsa-gx76-c99x-2c96-30159937","AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies",[5784],"CVE-2026-111749",[241],"2026-10-20T19:58:14Z","2026-10-20T20:15:05.188135798Z",[5789],{"type":2206,"score":5790},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5792,5794,5796,5798,5799],{"type":2210,"url":5793},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-gx76-c99x-2c96",{"type":2213,"url":5795},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111749",{"type":2210,"url":5797},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6a07c171ef9f3be583e2907dcd1931372efca8d6",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":242,"slug":5802,"dossier":47,"summary":5803,"aliases":5804,"sourceIds":5808,"published":5809,"modified":5810,"checkedAt":7,"severity":5811,"references":5814,"versionKeys":5826,"packageCount":32,"repositoryCount":2233},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[5805,5806,5807],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[242,5807],"2026-07-08T17:17:27.020Z","2026-09-10T03:50:52.323347787Z",[5812],{"type":2245,"score":5813},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[5815,5817,5819,5821,5823,5824],{"type":2404,"url":5816},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2213,"url":5818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2253,"url":5820},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2210,"url":5822},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2218,"url":3522},{"type":2213,"url":5825},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3528,3529,3530,3531,5827,5828,5829,5830,5831,5832,5833,5834],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@81.0.0","pypi:setuptools@82.0.1",{"id":243,"slug":5836,"dossier":47,"summary":5837,"aliases":5838,"sourceIds":5841,"published":5842,"modified":5843,"checkedAt":7,"severity":5844,"references":5847,"versionKeys":5868,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5839,5840],"CVE-2024-34064","PYSEC-2026-1474",[243,5840],"2024-05-06T14:20:59Z","2026-09-10T03:50:13.786450101Z",[5845],{"type":2245,"score":5846},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5848,5850,5852,5854,5855,5857,5859,5861,5863,5865,5866],{"type":2210,"url":5849},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2213,"url":5851},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2253,"url":5853},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2218,"url":5105},{"type":2210,"url":5856},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2210,"url":5858},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2210,"url":5860},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2210,"url":5862},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2210,"url":5864},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2218,"url":5111},{"type":2213,"url":5867},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5115],{"id":244,"slug":5870,"dossier":47,"summary":5871,"aliases":5872,"sourceIds":5875,"published":5876,"modified":5877,"checkedAt":7,"severity":5878,"references":5881,"versionKeys":5890,"packageCount":32,"repositoryCount":470},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[5873,5874],"CVE-2026-34513","PYSEC-2026-2095",[244,5874],"2026-04-01T21:16:59.267Z","2026-09-10T03:51:02.067006429Z",[5879,5880],{"type":2206,"score":2838},{"type":2245,"score":2329},[5882,5884,5886,5888,5889],{"type":2253,"url":5883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2213,"url":5885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2253,"url":5887},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":245,"slug":5892,"dossier":47,"summary":5893,"aliases":5894,"sourceIds":5897,"published":5898,"modified":5899,"checkedAt":7,"severity":5900,"references":5905,"versionKeys":5913,"packageCount":32,"repositoryCount":66},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[5895,5896],"CVE-2026-47265","PYSEC-2026-2105",[245,5896],"2026-06-02T20:16:37.903Z","2026-09-10T03:50:49.888335735Z",[5901,5903],{"type":2206,"score":5902},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2245,"score":5904},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5906,5908,5910,5912],{"type":2253,"url":5907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2213,"url":5909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2253,"url":5911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":246,"slug":5915,"dossier":47,"summary":2420,"aliases":5916,"sourceIds":5919,"published":5920,"modified":5921,"checkedAt":7,"severity":5922,"references":5924,"versionKeys":5937,"packageCount":32,"repositoryCount":2622},"ghsa-hgf8-39gv-g3f2-0469b394",[5917,5918],"CVE-2025-66221","PYSEC-2026-2046",[246,5918],"2025-12-02T00:27:38Z","2026-09-10T03:50:31.900494607Z",[5923],{"type":2206,"score":2305},[5925,5927,5929,5931,5932,5934,5935],{"type":2210,"url":5926},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":2213,"url":5928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":2210,"url":5930},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":2218,"url":2439},{"type":2210,"url":5933},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":2218,"url":2543},{"type":2213,"url":5936},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[2443,2444,2445,2446],{"id":247,"slug":5939,"dossier":47,"summary":5940,"aliases":5941,"sourceIds":5944,"published":5945,"modified":5946,"checkedAt":7,"severity":5947,"references":5951,"versionKeys":5957,"packageCount":32,"repositoryCount":66},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[5942,5943],"CVE-2026-54276","PYSEC-2026-2109",[247,5943],"2026-06-15T20:09:06Z","2026-09-10T03:50:49.899674354Z",[5948,5949],{"type":2206,"score":2961},{"type":2245,"score":5950},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5952,5954,5956],{"type":2213,"url":5953},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2253,"url":5955},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":248,"slug":5959,"dossier":47,"summary":5960,"aliases":5961,"sourceIds":5964,"published":5965,"modified":5966,"checkedAt":7,"severity":5967,"references":5971,"versionKeys":5988,"packageCount":32,"repositoryCount":518},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[5962,5963],"CVE-2025-67221","PYSEC-2026-107",[248,5963],"2026-01-22T17:16:01.433Z","2026-09-10T03:50:33.258377926Z",[5968,5970],{"type":2206,"score":5969},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2245,"score":2329},[5972,5974,5976,5978,5980,5982,5984,5986],{"type":2213,"url":5973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":2210,"url":5975},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":2210,"url":5977},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":2210,"url":5979},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":2218,"url":5981},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":2404,"url":5983},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":2210,"url":5985},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":2213,"url":5987},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[5989,5990,5991,5992],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":249,"slug":5994,"dossier":47,"summary":5995,"aliases":5996,"sourceIds":5999,"published":6000,"modified":6001,"checkedAt":7,"severity":6002,"references":6006,"versionKeys":6022,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5997,5998],"CVE-2024-11394","PYSEC-2024-229",[249,5998],"2024-11-22T22:15:07Z","2026-09-10T03:50:20.811665084Z",[6003,6005],{"type":2245,"score":6004},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2245,"score":2351},[6007,6009,6011,6013,6014,6016,6018,6020],{"type":2213,"url":6008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2210,"url":6010},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2210,"url":6012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2218,"url":2402},{"type":2210,"url":6015},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2210,"url":6017},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2213,"url":6019},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2213,"url":6021},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2409],{"id":250,"slug":6024,"dossier":47,"summary":6025,"aliases":6026,"sourceIds":6029,"published":6030,"modified":6031,"checkedAt":7,"severity":6032,"references":6034,"versionKeys":6043,"packageCount":32,"repositoryCount":2233},"ghsa-j4m9-6w36-pw47-8a42e0dd","Pillow: Invalid free in FreeType glyph rendering when a stroker is active",[6027,6028],"BIT-pillow-2026-112893","CVE-2026-112893",[250],"2026-10-21T20:06:34Z","2026-10-26T08:55:43.891551666Z",[6033],{"type":2206,"score":2207},[6035,6037,6039,6041,6042],{"type":2210,"url":6036},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-j4m9-6w36-pw47",{"type":2213,"url":6038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112893",{"type":2210,"url":6040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa7416de7f3a43128179d2cf68df3240ea8dafe13",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":251,"slug":6045,"dossier":47,"summary":6046,"aliases":6047,"sourceIds":6049,"published":6050,"modified":6051,"checkedAt":7,"severity":6052,"references":6054,"versionKeys":6064,"packageCount":32,"repositoryCount":2622},"ghsa-j586-36cw-2gc2-1c16441e","MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure",[6048],"CVE-2026-114613",[251],"2026-10-27T15:04:07Z","2026-10-27T15:15:08.389118415Z",[6053],{"type":2245,"score":2329},[6055,6057,6059,6061,6062],{"type":2210,"url":6056},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-j586-36cw-2gc2",{"type":2213,"url":6058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-114613",{"type":2210,"url":6060},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F620b0eb4c89cd72d4098564537624d9dbb2ce141",{"type":2218,"url":4162},{"type":2210,"url":6063},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.3",[4166,4167,4168,6065],"pypi:msgpack@1.2.1",{"id":252,"slug":6067,"dossier":47,"summary":6068,"aliases":6069,"sourceIds":6071,"published":6072,"modified":6073,"checkedAt":7,"severity":6074,"references":6077,"versionKeys":6087,"packageCount":32,"repositoryCount":2622},"ghsa-j8f7-rjxc-mr56-f1c144ea","filelock: ReadWriteLock follows a symlink at the lock path into SQLite",[6070],"CVE-2026-112936",[252],"2026-10-28T21:08:30Z","2026-10-28T21:15:04.169983430Z",[6075],{"type":2245,"score":6076},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[6078,6080,6082,6084,6085],{"type":2210,"url":6079},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-j8f7-rjxc-mr56",{"type":2213,"url":6081},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112936",{"type":2210,"url":6083},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4d45e83caf7e31f9a12fb44526bdc07f70114f04",{"type":2218,"url":3350},{"type":2210,"url":6086},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F4.0.9",[3354,3355,3356,3357],{"id":253,"slug":6089,"dossier":47,"summary":6090,"aliases":6091,"sourceIds":6094,"published":6095,"modified":6096,"checkedAt":7,"severity":6097,"references":6102,"versionKeys":6119,"packageCount":32,"repositoryCount":66},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[6092,6093],"CVE-2026-34993","PYSEC-2026-2104",[253,6093],"2026-06-02T20:16:34.857Z","2026-09-10T03:51:08.847676311Z",[6098,6100],{"type":2245,"score":6099},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2245,"score":6101},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6103,6105,6107,6109,6110,6112,6114,6115,6116,6117],{"type":2253,"url":6104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2213,"url":6106},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2253,"url":6108},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2218,"url":2501},{"type":2210,"url":6111},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2210,"url":6113},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2213,"url":3746},{"type":2213,"url":5363},{"type":2213,"url":5365},{"type":2727,"url":6118},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":254,"slug":6121,"dossier":47,"summary":6122,"aliases":6123,"sourceIds":6126,"published":6127,"modified":6128,"checkedAt":7,"severity":6129,"references":6131,"versionKeys":6140,"packageCount":32,"repositoryCount":2233},"ghsa-jg86-v3jv-hrpm-1380c45f","Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)",[6124,6125],"BIT-pillow-2026-112894","CVE-2026-112894",[254],"2026-10-21T21:11:44Z","2026-10-26T08:56:08.669907131Z",[6130],{"type":2206,"score":2557},[6132,6134,6136,6138,6139],{"type":2210,"url":6133},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jg86-v3jv-hrpm",{"type":2213,"url":6135},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112894",{"type":2210,"url":6137},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":255,"slug":6142,"dossier":47,"summary":6143,"aliases":6144,"sourceIds":6147,"published":6148,"modified":6149,"checkedAt":7,"severity":6150,"references":6152,"versionKeys":6163,"packageCount":32,"repositoryCount":480},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[6145,6146],"CVE-2025-69227","PYSEC-2026-1107",[255,6146],"2026-01-05T23:10:15Z","2026-09-10T03:50:33.308966616Z",[6151],{"type":2206,"score":2983},[6153,6155,6157,6159,6160,6161],{"type":2210,"url":6154},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2213,"url":6156},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2210,"url":6158},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":6162},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2505,2506,2507,2508,2509,2510,2511],{"id":256,"slug":6165,"dossier":47,"summary":6166,"aliases":6167,"sourceIds":6171,"published":6172,"modified":6173,"checkedAt":7,"severity":6174,"references":6176,"versionKeys":6190,"packageCount":32,"repositoryCount":2902},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[6168,6169,6170],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[256,6170],"2026-07-20T23:11:29Z","2026-09-10T03:50:12.341825852Z",[6175],{"type":2245,"score":2329},[6177,6179,6181,6183,6185,6186,6187,6188],{"type":2210,"url":6178},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2213,"url":6180},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2210,"url":6182},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2210,"url":6184},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2218,"url":2219},{"type":2210,"url":3719},{"type":2218,"url":3721},{"type":2213,"url":6189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":257,"slug":6192,"dossier":47,"summary":6193,"aliases":6194,"sourceIds":6197,"published":6198,"modified":6199,"checkedAt":7,"severity":6200,"references":6202,"versionKeys":6215,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[6195,6196],"CVE-2025-3264","PYSEC-2026-1985",[257,6196],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[6201],{"type":2245,"score":3105},[6203,6205,6207,6209,6210,6212,6213],{"type":2213,"url":6204},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2210,"url":6206},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2210,"url":6208},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2218,"url":2402},{"type":2210,"url":6211},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2218,"url":2771},{"type":2213,"url":6214},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2409],{"id":258,"slug":6217,"dossier":47,"summary":6218,"aliases":6219,"sourceIds":6222,"published":6223,"modified":6224,"checkedAt":7,"severity":6225,"references":6228,"versionKeys":6241,"packageCount":32,"repositoryCount":103},"ghsa-jp4c-xjxw-mgf9-e780c8d6","pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere",[6220,6221],"CVE-2026-6357","PYSEC-2026-2876",[258,6221],"2026-04-27T15:30:52Z","2026-09-10T03:50:44.656580653Z",[6226],{"type":2206,"score":6227},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6229,6231,6233,6235,6236,6238,6239],{"type":2213,"url":6230},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-6357",{"type":2210,"url":6232},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F13923",{"type":2210,"url":6234},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002Fb369bfc96cc524e00c267e1693290e6599c36bad",{"type":2218,"url":3169},{"type":2210,"url":6237},"https:\u002F\u002Fichard26.github.io\u002Fblog\u002F2026\u002F04\u002Fwhats-new-in-pip-26.1\u002F#security-fixes",{"type":2218,"url":3177},{"type":2213,"url":6240},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jp4c-xjxw-mgf9",[3181,3182],{"id":259,"slug":6243,"dossier":47,"summary":6244,"aliases":6245,"sourceIds":6248,"published":6249,"modified":6250,"checkedAt":7,"severity":6251,"references":6254,"versionKeys":6262,"packageCount":32,"repositoryCount":470},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[6246,6247],"CVE-2026-54282","PYSEC-2026-248",[259,6247],"2026-06-15T20:38:08Z","2026-09-10T03:50:50.050800090Z",[6252,6253],{"type":2245,"score":4026},{"type":2245,"score":2636},[6255,6257,6259,6260],{"type":2213,"url":6256},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2213,"url":6258},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2218,"url":4294},{"type":2210,"url":6261},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2477,2478,2479,4301,4302,4303,4410,4411,4412],{"id":260,"slug":6264,"dossier":47,"summary":6265,"aliases":6266,"sourceIds":6269,"published":6270,"modified":6271,"checkedAt":7,"severity":6272,"references":6277,"versionKeys":6290,"packageCount":32,"repositoryCount":32},"ghsa-jw8x-6495-233v-cb32b711","scikit-learn sensitive data leakage vulnerability",[6267,6268],"CVE-2024-5206","PYSEC-2024-110",[260,6268],"2024-06-06T19:16:00Z","2026-09-10T03:50:15.628224747Z",[6273,6275],{"type":2245,"score":6274},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2245,"score":6276},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[6278,6280,6282,6284,6286,6288],{"type":2213,"url":6279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-5206",{"type":2253,"url":6281},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn\u002Fcommit\u002F70ca21f106b603b611da73012c9ade7cd8e438b8",{"type":2210,"url":6283},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fscikit-learn\u002FPYSEC-2024-110.yaml",{"type":2218,"url":6285},"https:\u002F\u002Fgithub.com\u002Fscikit-learn\u002Fscikit-learn",{"type":2210,"url":6287},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F14bc0917-a85b-4106-a170-d09d5191517c",{"type":2213,"url":6289},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jw8x-6495-233v",[6291],"pypi:scikit-learn@1.3.2",{"id":261,"slug":6293,"dossier":47,"summary":6294,"aliases":6295,"sourceIds":6298,"published":6299,"modified":6300,"checkedAt":7,"severity":6301,"references":6306,"versionKeys":6315,"packageCount":32,"repositoryCount":470},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[6296,6297],"CVE-2026-34516","PYSEC-2026-2098",[261,6297],"2026-04-01T21:16:59.723Z","2026-09-10T03:51:02.372876858Z",[6302,6303,6304],{"type":2245,"score":2329},{"type":2206,"score":2983},{"type":2206,"score":6305},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6307,6309,6311,6313,6314],{"type":2253,"url":6308},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2213,"url":6310},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2253,"url":6312},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":262,"slug":6317,"dossier":47,"summary":6318,"aliases":6319,"sourceIds":6322,"published":6323,"modified":6324,"checkedAt":7,"severity":6325,"references":6328,"versionKeys":6334,"packageCount":32,"repositoryCount":66},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[6320,6321],"CVE-2026-50269","PYSEC-2026-2106",[262,6321],"2026-06-15T20:07:26Z","2026-09-10T03:51:09.078868018Z",[6326,6327],{"type":2206,"score":2634},{"type":2245,"score":2329},[6329,6331,6333],{"type":2213,"url":6330},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2253,"url":6332},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2218,"url":2501},[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":263,"slug":6336,"dossier":47,"summary":6337,"aliases":6338,"sourceIds":6341,"published":6342,"modified":6343,"checkedAt":7,"severity":6344,"references":6346,"versionKeys":6355,"packageCount":32,"repositoryCount":32},"ghsa-m9gh-vj53-gvh9-764ccc6a","python-engineio has possible denial of service due to maximum payload size sometimes not being enforced",[6339,6340],"CVE-2026-48809","PYSEC-2026-3033",[263,6340],"2026-06-26T20:48:18Z","2026-07-13T16:43:30.815486921Z",[6345],{"type":2245,"score":2329},[6347,6349,6350,6351,6353],{"type":2210,"url":6348},"https:\u002F\u002Fgithub.com\u002Fmiguelgrinberg\u002Fpython-engineio\u002Fsecurity\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":2218,"url":5053},{"type":2218,"url":5055},{"type":2213,"url":6352},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m9gh-vj53-gvh9",{"type":2213,"url":6354},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48809",[5061],{"id":264,"slug":6357,"dossier":47,"summary":6358,"aliases":6359,"sourceIds":6361,"published":6362,"modified":6363,"checkedAt":7,"severity":6364,"references":6366,"versionKeys":6383,"packageCount":32,"repositoryCount":470},"ghsa-mf5v-w3w3-f6cg-b8bbc3e6","OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing",[6360],"CVE-2026-126360",[264],"2026-11-13T16:43:18Z","2026-11-13T17:00:03.925479166Z",[6365],{"type":2245,"score":2430},[6367,6369,6371,6373,6375,6377,6379,6381],{"type":2210,"url":6368},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-mf5v-w3w3-f6cg",{"type":2213,"url":6370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-126360",{"type":2210,"url":6372},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5818",{"type":2210,"url":6374},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5856",{"type":2210,"url":6376},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002F78123a2755c907c602e02352aebed4be86aa5350",{"type":2210,"url":6378},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Ffaa72dae511ae64a7bf8ca63eff9ad4387d0b939",{"type":2218,"url":6380},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python",{"type":2210,"url":6382},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.2",[6384,6385,6386,6387,6388,6389,6390,6391,6392],"pypi:opentelemetry-api@1.25.0","pypi:opentelemetry-api@1.26.0","pypi:opentelemetry-api@1.28.2","pypi:opentelemetry-api@1.34.1","pypi:opentelemetry-api@1.36.0","pypi:opentelemetry-api@1.38.0","pypi:opentelemetry-api@1.39.1","pypi:opentelemetry-api@1.43.0","pypi:opentelemetry-api@1.45.1",{"id":265,"slug":6394,"dossier":47,"summary":6395,"aliases":6396,"sourceIds":6399,"published":6400,"modified":6401,"checkedAt":7,"severity":6402,"references":6405,"versionKeys":6413,"packageCount":32,"repositoryCount":103},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[6397,6398],"CVE-2026-44432","PYSEC-2026-142",[265,6398],"2026-05-11T14:51:45Z","2026-09-10T03:51:06.409994465Z",[6403,6404],{"type":2245,"score":2329},{"type":2206,"score":2659},[6406,6408,6410,6412],{"type":2213,"url":6407},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2213,"url":6409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2210,"url":6411},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2218,"url":2674},[4555],{"id":266,"slug":6415,"dossier":47,"summary":6416,"aliases":6417,"sourceIds":6420,"published":6421,"modified":6422,"checkedAt":7,"severity":6423,"references":6426,"versionKeys":6439,"packageCount":32,"repositoryCount":2589},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[6418,6419],"CVE-2026-28684","PYSEC-2026-2270",[266,6419],"2026-04-20T17:16:33.087Z","2026-09-10T03:51:02.363430883Z",[6424],{"type":2245,"score":6425},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6427,6429,6431,6433,6435,6437],{"type":2253,"url":6428},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2213,"url":6430},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2253,"url":6432},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2210,"url":6434},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2218,"url":6436},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2213,"url":6438},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[6440,6441,6442,6443],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":267,"slug":6445,"dossier":47,"summary":6446,"aliases":6447,"sourceIds":6450,"published":6451,"modified":6452,"checkedAt":7,"severity":6453,"references":6456,"versionKeys":6471,"packageCount":32,"repositoryCount":42},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[6448,6449],"CVE-2026-69243","PYSEC-2026-3546",[267,6449],"2026-08-03T20:46:10Z","2026-09-10T03:51:14.385788837Z",[6454],{"type":2206,"score":6455},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6457,6459,6461,6463,6464,6466,6467,6469],{"type":2210,"url":6458},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2210,"url":6460},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2210,"url":6462},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2218,"url":2501},{"type":2210,"url":6465},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2218,"url":3269},{"type":2213,"url":6468},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2213,"url":6470},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587],{"id":268,"slug":6473,"dossier":47,"summary":6474,"aliases":6475,"sourceIds":6478,"published":6479,"modified":6480,"checkedAt":7,"severity":6481,"references":6483,"versionKeys":6494,"packageCount":32,"repositoryCount":34},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[6476,6477],"CVE-2026-40347","PYSEC-2026-3038",[268,6477],"2026-04-15T19:45:44Z","2026-09-10T03:51:02.322677211Z",[6482],{"type":2245,"score":2430},[6484,6486,6488,6489,6491,6492],{"type":2210,"url":6485},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2213,"url":6487},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2218,"url":3427},{"type":2210,"url":6490},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2218,"url":3429},{"type":2213,"url":6493},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3553,3554,3433],{"id":269,"slug":6496,"dossier":47,"summary":6497,"aliases":6498,"sourceIds":6501,"published":6502,"modified":6503,"checkedAt":7,"severity":6504,"references":6510,"versionKeys":6537,"packageCount":32,"repositoryCount":32},"ghsa-mq26-g339-26xf-ed024c7e","Command Injection in pip when used with Mercurial",[6499,6500],"CVE-2023-5752","PYSEC-2023-228",[269,6500],"2023-10-25T18:17:00Z","2026-09-10T03:50:03.949904915Z",[6505,6506,6508],{"type":2245,"score":5670},{"type":2206,"score":6507},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":6509},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[6511,6513,6515,6517,6519,6520,6521,6523,6525,6527,6529,6531,6533,6535],{"type":2213,"url":6512},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-5752",{"type":2253,"url":6514},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F12306",{"type":2210,"url":6516},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F389cb799d0da9a840749fcd14878928467ed49b4",{"type":2210,"url":6518},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2023-228.yaml",{"type":2218,"url":3169},{"type":2210,"url":3171},{"type":2210,"url":6522},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F622OZXWG72ISQPLM5Y57YCVIMWHD4C3U",{"type":2210,"url":6524},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F65UKKF5LBHEFDCUSPBHUN4IHYX7SRMHH",{"type":2210,"url":6526},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFXUVMJM25PUAZRQZBF54OFVKTY3MINPW",{"type":2210,"url":6528},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FKFC2SPFG5FLCZBYY2K3T5MFW2D22NG6E",{"type":2210,"url":6530},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FYBSB3SUPQ3VIFYUMHPO3MEQI4BJAXKCZ",{"type":2210,"url":6532},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL",{"type":2213,"url":6534},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FF4PL35U6X4VVHZ5ILJU3PWUWN7H7LZXL\u002F",{"type":2213,"url":6536},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq26-g339-26xf",[3181],{"id":270,"slug":6539,"dossier":47,"summary":6540,"aliases":6541,"sourceIds":6544,"published":6545,"modified":6546,"checkedAt":7,"severity":6547,"references":6549,"versionKeys":6562,"packageCount":32,"repositoryCount":42},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[6542,6543],"CVE-2026-59881","PYSEC-2026-3547",[270,6543],"2026-08-03T20:40:55Z","2026-09-10T03:51:14.489650589Z",[6548],{"type":2206,"score":3859},[6550,6552,6554,6556,6558,6559,6560],{"type":2210,"url":6551},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2213,"url":6553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2210,"url":6555},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2210,"url":6557},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":6561},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587],{"id":271,"slug":6564,"dossier":47,"summary":6565,"aliases":6566,"sourceIds":6569,"published":6570,"modified":6571,"checkedAt":7,"severity":6572,"references":6574,"versionKeys":6585,"packageCount":32,"repositoryCount":480},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[6567,6568],"CVE-2025-69225","PYSEC-2026-1109",[271,6568],"2026-01-05T23:09:30Z","2026-09-10T03:50:33.538693726Z",[6573],{"type":2206,"score":2634},[6575,6577,6579,6581,6582,6583],{"type":2210,"url":6576},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2213,"url":6578},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2253,"url":6580},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2218,"url":2501},{"type":2218,"url":3269},{"type":2213,"url":6584},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2505,2506,2507,2508,2509,2510,2511],{"id":272,"slug":6587,"dossier":47,"summary":6588,"aliases":6589,"sourceIds":6592,"published":6593,"modified":6594,"checkedAt":7,"severity":6595,"references":6597,"versionKeys":6608,"packageCount":32,"repositoryCount":2233},"ghsa-mrfp-p49p-3hf2-6cfe1cba","Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion",[6590,6591],"BIT-pillow-2026-96640","CVE-2026-96640",[272],"2026-10-22T16:00:47Z","2026-10-29T10:55:39.916451864Z",[6596],{"type":2206,"score":2207},[6598,6600,6602,6604,6606,6607],{"type":2210,"url":6599},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-mrfp-p49p-3hf2",{"type":2213,"url":6601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96640",{"type":2210,"url":6603},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10093",{"type":2210,"url":6605},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":273,"slug":6610,"dossier":47,"summary":6611,"aliases":6612,"sourceIds":6615,"published":6616,"modified":6617,"checkedAt":7,"severity":6618,"references":6621,"versionKeys":6630,"packageCount":32,"repositoryCount":470},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[6613,6614],"CVE-2026-34519","PYSEC-2026-2101",[273,6614],"2026-04-01T21:17:00.170Z","2026-09-10T03:50:44.819886754Z",[6619,6620],{"type":2206,"score":2634},{"type":2245,"score":2636},[6622,6624,6626,6628,6629],{"type":2253,"url":6623},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2213,"url":6625},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2253,"url":6627},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":274,"slug":6632,"dossier":47,"summary":6633,"aliases":6634,"sourceIds":6637,"published":6638,"modified":6639,"checkedAt":7,"severity":6640,"references":6642,"versionKeys":6651,"packageCount":32,"repositoryCount":2233},"ghsa-p4wg-p73j-c528-fd1a8a19","Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)",[6635,6636],"BIT-pillow-2026-112895","CVE-2026-112895",[274],"2026-10-20T20:50:49Z","2026-10-26T08:55:38.434240536Z",[6641],{"type":2206,"score":2557},[6643,6645,6647,6649,6650],{"type":2210,"url":6644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p4wg-p73j-c528",{"type":2213,"url":6646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112895",{"type":2210,"url":6648},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fe2ae7eacad6de68c37eb28b633a97bebacf2c5bf",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":275,"slug":6653,"dossier":47,"summary":6654,"aliases":6655,"sourceIds":6659,"published":6660,"modified":6661,"checkedAt":7,"severity":6662,"references":6664,"versionKeys":6674,"packageCount":32,"repositoryCount":2233},"ghsa-p8hx-v2p6-rp84-525428cb","Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek \u002F DcxImageFile.seek)",[6656,6657,6658],"BIT-pillow-2026-96636","CVE-2026-96636","PYSEC-2026-4337",[275,6658],"2026-10-21T21:20:31.760Z","2026-10-29T10:55:49.521326948Z",[6663],{"type":2245,"score":2281},[6665,6667,6669,6671,6672,6673],{"type":2213,"url":6666},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-p8hx-v2p6-rp84",{"type":2213,"url":6668},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96636",{"type":2727,"url":6670},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10011",{"type":2253,"url":3662},{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":276,"slug":6676,"dossier":47,"summary":6677,"aliases":6678,"sourceIds":6681,"published":6682,"modified":6683,"checkedAt":7,"severity":6684,"references":6687,"versionKeys":6696,"packageCount":32,"repositoryCount":470},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[6679,6680],"CVE-2026-34515","PYSEC-2026-2097",[276,6680],"2026-04-01T21:16:59.570Z","2026-09-10T03:51:02.565661873Z",[6685,6686],{"type":2206,"score":5902},{"type":2245,"score":5904},[6688,6690,6692,6694,6695],{"type":2253,"url":6689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2213,"url":6691},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2253,"url":6693},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":277,"slug":6698,"dossier":47,"summary":6699,"aliases":6700,"sourceIds":6704,"published":6705,"modified":6706,"checkedAt":7,"severity":6707,"references":6711,"versionKeys":6720,"packageCount":32,"repositoryCount":2233},"ghsa-pchr-8j38-3x4p-42f3b4df","Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read",[6701,6702,6703],"BIT-pillow-2026-112896","CVE-2026-112896","PYSEC-2026-4334",[277,6703],"2026-10-19T22:17:09.760Z","2026-10-28T11:10:41.233140457Z",[6708,6709],{"type":2206,"score":4972},{"type":2245,"score":6710},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[6712,6714,6716,6718,6719],{"type":2404,"url":6713},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pchr-8j38-3x4p",{"type":2213,"url":6715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112896",{"type":2253,"url":6717},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fd03dc3c587a9b0bdc9e4304d70d59a635a87b742",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":278,"slug":6722,"dossier":47,"summary":6723,"aliases":6724,"sourceIds":6728,"published":6729,"modified":6730,"checkedAt":7,"severity":6731,"references":6734,"versionKeys":6747,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[6725,6726,6727],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[278,6727],"2026-07-14T16:17:02.063Z","2026-09-10T03:50:52.876709782Z",[6732,6733],{"type":2245,"score":2430},{"type":2245,"score":2329},[6735,6737,6739,6741,6743,6745,6746],{"type":2404,"url":6736},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2213,"url":6738},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2253,"url":6740},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2253,"url":6742},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2210,"url":6744},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2218,"url":2219},{"type":2213,"url":3719},[2228,2229,2230,2231],{"id":279,"slug":6749,"dossier":47,"summary":6750,"aliases":6751,"sourceIds":6754,"published":6198,"modified":6755,"checkedAt":7,"severity":6756,"references":6759,"versionKeys":6772,"packageCount":32,"repositoryCount":103},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[6752,6753],"CVE-2025-3777","PYSEC-2026-1986",[279,6753],"2026-09-10T03:50:26.198077196Z",[6757],{"type":2245,"score":6758},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6760,6762,6764,6765,6767,6769,6770],{"type":2213,"url":6761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2210,"url":6763},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2218,"url":2402},{"type":2210,"url":6766},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2210,"url":6768},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2218,"url":2771},{"type":2213,"url":6771},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2409,2410,2411],{"id":280,"slug":6774,"dossier":47,"summary":6775,"aliases":6776,"sourceIds":6780,"published":6781,"modified":6782,"checkedAt":7,"severity":6783,"references":6785,"versionKeys":6796,"packageCount":32,"repositoryCount":2902},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[6777,6778,6779],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[280,6779],"2026-07-06T19:17:08.703Z","2026-09-10T03:51:11.734605509Z",[6784],{"type":2245,"score":2329},[6786,6788,6790,6792,6794,6795],{"type":2404,"url":6787},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2213,"url":6789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2253,"url":6791},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2210,"url":6793},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2218,"url":2219},{"type":2213,"url":2900},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":281,"slug":6798,"dossier":47,"summary":6799,"aliases":6800,"sourceIds":6803,"published":6804,"modified":6805,"checkedAt":7,"severity":6806,"references":6808,"versionKeys":6817,"packageCount":32,"repositoryCount":34},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[6801,6802],"CVE-2026-42561","PYSEC-2026-3039",[281,6802],"2026-05-06T21:56:14Z","2026-09-10T03:50:47.215892833Z",[6807],{"type":2245,"score":2329},[6809,6811,6813,6814,6815],{"type":2210,"url":6810},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2213,"url":6812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2218,"url":3427},{"type":2218,"url":3429},{"type":2213,"url":6816},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3553,3554,3433],{"id":282,"slug":6819,"dossier":47,"summary":6820,"aliases":6821,"sourceIds":6824,"published":6825,"modified":6826,"checkedAt":7,"severity":6827,"references":6829,"versionKeys":6841,"packageCount":32,"repositoryCount":480},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[6822,6823],"CVE-2025-50181","PYSEC-2026-1999",[282,6823],"2025-06-18T17:50:00Z","2026-09-10T03:50:25.299291456Z",[6828],{"type":2245,"score":2936},[6830,6832,6834,6836,6837,6838,6839],{"type":2210,"url":6831},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2213,"url":6833},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2253,"url":6835},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2218,"url":2674},{"type":2210,"url":2946},{"type":2218,"url":2676},{"type":2213,"url":6840},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2678,2679,2680,2681],{"id":283,"slug":6843,"dossier":47,"summary":6844,"aliases":6845,"sourceIds":6847,"published":6848,"modified":6849,"checkedAt":7,"severity":6850,"references":6853,"versionKeys":6862,"packageCount":32,"repositoryCount":2589},"ghsa-pqxq-w44r-73xw-f260bc82","AIOHTTP: Pure-Python parser request smuggling",[6846],"CVE-2026-111750",[283],"2026-10-20T19:52:21Z","2026-10-20T20:00:04.694820004Z",[6851],{"type":2206,"score":6852},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:L\u002FSA:L",[6854,6856,6858,6860,6861],{"type":2210,"url":6855},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-pqxq-w44r-73xw",{"type":2213,"url":6857},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-111750",{"type":2210,"url":6859},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9b27347e61454d9f8ca2055f4c67a37dee336e83",{"type":2218,"url":2501},{"type":2210,"url":2585},[2505,2506,2507,2508,2509,2510,2511,2512,2513,2587,2588],{"id":284,"slug":6864,"dossier":47,"summary":6865,"aliases":6866,"sourceIds":6870,"published":6871,"modified":6872,"checkedAt":7,"severity":6873,"references":6876,"versionKeys":6888,"packageCount":32,"repositoryCount":2683},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[6867,6868,6869],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[284,6869],"2026-05-04T20:20:31Z","2026-09-10T03:50:47.242104143Z",[6874,6875],{"type":2206,"score":4995},{"type":2245,"score":3958},[6877,6878,6880,6882,6884,6886,6887],{"type":2210,"url":4999},{"type":2253,"url":6879},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2213,"url":6881},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2253,"url":6883},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2253,"url":6885},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2218,"url":2219},{"type":2213,"url":3693},[2223,2224,2225,2226,2227,2228,2229,2230],{"id":285,"slug":6890,"dossier":47,"summary":6891,"aliases":6892,"sourceIds":6895,"published":6198,"modified":6896,"checkedAt":7,"severity":6897,"references":6899,"versionKeys":6910,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[6893,6894],"CVE-2025-3263","PYSEC-2026-1987",[285,6894],"2026-07-07T17:56:57.889099913Z",[6898],{"type":2245,"score":3105},[6900,6902,6903,6904,6905,6907,6908],{"type":2213,"url":6901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2210,"url":6206},{"type":2210,"url":6208},{"type":2218,"url":2402},{"type":2210,"url":6906},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2218,"url":2771},{"type":2213,"url":6909},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2409],{"id":286,"slug":6912,"dossier":47,"summary":6913,"aliases":6914,"sourceIds":6917,"published":6918,"modified":6919,"checkedAt":7,"severity":6920,"references":6924,"versionKeys":6937,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[6915,6916],"CVE-2024-56326","PYSEC-2026-1475",[286,6916],"2024-12-23T17:56:08Z","2026-09-10T03:50:21.662855250Z",[6921,6923],{"type":2245,"score":6922},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2206,"score":5096},[6925,6927,6929,6931,6932,6933,6934,6935],{"type":2210,"url":6926},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2213,"url":6928},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2253,"url":6930},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2218,"url":5105},{"type":2210,"url":5775},{"type":2210,"url":5107},{"type":2218,"url":5111},{"type":2213,"url":6936},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5115],{"id":287,"slug":6939,"dossier":47,"summary":6940,"aliases":6941,"sourceIds":6945,"published":6946,"modified":6947,"checkedAt":7,"severity":6948,"references":6951,"versionKeys":6971,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[6942,6943,6944],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[287,6944],"2024-10-25T19:44:43Z","2026-09-10T03:50:19.984825326Z",[6949,6950],{"type":2245,"score":2329},{"type":2206,"score":3859},[6952,6954,6956,6958,6960,6962,6964,6965,6966,6968,6969],{"type":2210,"url":6953},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":2213,"url":6955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":2210,"url":6957},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":2210,"url":6959},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":2210,"url":6961},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":2210,"url":6963},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":2218,"url":2439},{"type":2210,"url":5295},{"type":2210,"url":6967},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":2218,"url":2543},{"type":2213,"url":6970},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[2443],{"id":288,"slug":6973,"dossier":47,"summary":6974,"aliases":6975,"sourceIds":6978,"published":6979,"modified":6980,"checkedAt":7,"severity":6981,"references":6983,"versionKeys":6991,"packageCount":32,"repositoryCount":2233},"ghsa-q45j-58j2-45rg-cd238628","Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips",[6976,6977],"BIT-pillow-2026-112897","CVE-2026-112897",[288],"2026-10-20T20:52:43Z","2026-10-26T08:56:08.265781051Z",[6982],{"type":2206,"score":2601},[6984,6986,6988,6989,6990],{"type":2210,"url":6985},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-q45j-58j2-45rg",{"type":2213,"url":6987},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112897",{"type":2210,"url":4979},{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":289,"slug":6993,"dossier":47,"summary":6994,"aliases":6995,"sourceIds":6998,"published":6999,"modified":7000,"checkedAt":7,"severity":7001,"references":7005,"versionKeys":7011,"packageCount":32,"repositoryCount":2233},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[6996,6997],"CVE-2026-44431","PYSEC-2026-141",[289,6997],"2026-05-11T14:51:20Z","2026-09-10T03:50:47.272765640Z",[7002,7003],{"type":2245,"score":3834},{"type":2206,"score":7004},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7006,7008,7010],{"type":2213,"url":7007},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2213,"url":7009},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2218,"url":2674},[2678,2679,2680,2681,2682,4555],{"id":290,"slug":7013,"dossier":47,"summary":7014,"aliases":7015,"sourceIds":7019,"published":7020,"modified":7021,"checkedAt":7,"severity":7022,"references":7026,"versionKeys":7044,"packageCount":32,"repositoryCount":3774},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[7016,7017,7018],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[290],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[7023,7024],{"type":2245,"score":4589},{"type":2206,"score":7025},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7027,7029,7031,7033,7035,7037,7038,7040,7042],{"type":2213,"url":7028},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2210,"url":7030},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2210,"url":7032},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2210,"url":7034},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2210,"url":7036},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2218,"url":2734},{"type":2210,"url":7039},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2210,"url":7041},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2210,"url":7043},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2746,2747,2748,3767,3768,3769,3770,3771,3772,3773],{"id":291,"slug":7046,"dossier":47,"summary":7047,"aliases":7048,"sourceIds":7051,"published":7052,"modified":7053,"checkedAt":7,"severity":7054,"references":7057,"versionKeys":7071,"packageCount":32,"repositoryCount":3774},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[7049,7050],"CVE-2026-22701","PYSEC-2026-1374",[291,7050],"2026-01-13T18:44:55Z","2026-09-10T03:50:33.702580779Z",[7055],{"type":2245,"score":7056},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[7058,7060,7062,7064,7066,7067,7069],{"type":2210,"url":7059},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2213,"url":7061},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2210,"url":7063},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2210,"url":7065},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2218,"url":3350},{"type":2218,"url":7068},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2213,"url":7070},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[3940,3941,3942,3943],{"id":292,"slug":7073,"dossier":47,"summary":7074,"aliases":7075,"sourceIds":7078,"published":7079,"modified":7080,"checkedAt":7,"severity":7081,"references":7084,"versionKeys":7098,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[7076,7077],"CVE-2025-2099","PYSEC-2025-40",[292,7077],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[7082,7083],{"type":2245,"score":3105},{"type":2245,"score":2329},[7085,7087,7089,7091,7092,7094,7096],{"type":2213,"url":7086},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2210,"url":7088},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2253,"url":7090},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2218,"url":2402},{"type":2210,"url":7093},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2210,"url":7095},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2213,"url":7097},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2409],{"id":293,"slug":7100,"dossier":47,"summary":7101,"aliases":7102,"sourceIds":7106,"published":7107,"modified":7108,"checkedAt":7,"severity":7109,"references":7115,"versionKeys":7136,"packageCount":380,"repositoryCount":380},"ghsa-qqmf-gpg7-g8gw-3e372614","PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters",[7103,7104,7105],"CVE-2026-58659","PYSEC-2026-3624","PYSEC-2026-3967",[293,7104,7105],"2026-07-15T18:16:48.743Z","2026-09-24T15:45:09.719284514Z",[7110,7111,7113],{"type":2245,"score":3958},{"type":2206,"score":7112},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2206,"score":7114},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7116,7118,7120,7122,7124,7126,7128,7130,7132,7134],{"type":2213,"url":7117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-58659",{"type":2727,"url":7119},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fissues\u002F21822",{"type":2253,"url":7121},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fpull\u002F21832",{"type":2253,"url":7123},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Fcommit\u002Fd710d689510d50e800f53b3cd773cbca20b1f86f",{"type":2218,"url":7125},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning",{"type":2210,"url":7127},"https:\u002F\u002Fgithub.com\u002FLightning-AI\u002Fpytorch-lightning\u002Freleases\u002Ftag\u002F2.6.6",{"type":2213,"url":7129},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qqmf-gpg7-g8gw",{"type":2210,"url":7131},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flightning\u002FPYSEC-2026-3624.yaml",{"type":2210,"url":7133},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpytorch-lightning\u002FPYSEC-2026-3967.yaml",{"type":2253,"url":7135},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fpytorch-lightning-arbitrary-code-execution-via-instantiator-hyperparameter",[7137,7138,7139,7140],"pypi:lightning@2.6.1","pypi:lightning@2.6.5","pypi:pytorch-lightning@2.6.1","pypi:pytorch-lightning@2.6.5",{"id":294,"slug":7142,"dossier":47,"summary":7143,"aliases":7144,"sourceIds":7147,"published":7148,"modified":7149,"checkedAt":7,"severity":7150,"references":7155,"versionKeys":7171,"packageCount":32,"repositoryCount":518},"ghsa-qwm4-qh6w-59xr-db792663","pip would incorrectly handle doubly-encoded package URLs from indexes",[7145,7146],"CVE-2026-13346","PYSEC-2026-3721",[294,7146],"2026-07-29T19:16:44.267Z","2026-09-10T11:15:08.939447160Z",[7151,7153],{"type":2206,"score":7152},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:H\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":7154},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[7156,7158,7160,7162,7164,7165,7167,7169],{"type":2213,"url":7157},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-13346",{"type":2253,"url":7159},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14110",{"type":2210,"url":7161},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fcommit\u002F10dfb6b9005484578b386f64b9f36982e3dc6679",{"type":2210,"url":7163},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-3721.yaml",{"type":2218,"url":3169},{"type":2210,"url":7166},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX",{"type":2213,"url":7168},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FL2BNQGGVQCEV7DROOORQ7WFKKFF2OOQX\u002F",{"type":2213,"url":7170},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qwm4-qh6w-59xr",[3181,3182,7172],"pypi:pip@26.1.2",{"id":295,"slug":7174,"dossier":47,"summary":5995,"aliases":7175,"sourceIds":7178,"published":7179,"modified":7180,"checkedAt":7,"severity":7181,"references":7185,"versionKeys":7199,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[7176,7177],"CVE-2024-11392","PYSEC-2024-227",[295,7177],"2024-11-22T22:15:06Z","2026-09-10T03:50:21.016710762Z",[7182,7184],{"type":2245,"score":7183},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2245,"score":2351},[7186,7188,7189,7190,7191,7193,7195,7197],{"type":2213,"url":7187},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2210,"url":6010},{"type":2210,"url":6012},{"type":2218,"url":2402},{"type":2210,"url":7192},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2210,"url":7194},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2213,"url":7196},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2213,"url":7198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2409],{"id":296,"slug":7201,"dossier":47,"summary":7202,"aliases":7203,"sourceIds":7207,"published":7208,"modified":7209,"checkedAt":7,"severity":7210,"references":7213,"versionKeys":7227,"packageCount":32,"repositoryCount":2683},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[7204,7205,7206],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[296,7206],"2026-05-04T20:19:30Z","2026-09-10T03:50:55.309086884Z",[7211,7212],{"type":2245,"score":2722},{"type":2206,"score":3679},[7214,7216,7218,7220,7222,7223,7224,7225],{"type":2210,"url":7215},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2213,"url":7217},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2210,"url":7219},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2210,"url":7221},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2218,"url":2219},{"type":2210,"url":3693},{"type":2218,"url":3721},{"type":2213,"url":7226},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2223,2224,2225,2226,2227,2228,2229,2230],{"id":297,"slug":7229,"dossier":47,"summary":7230,"aliases":7231,"sourceIds":7234,"published":7235,"modified":7236,"checkedAt":7,"severity":7237,"references":7239,"versionKeys":7254,"packageCount":32,"repositoryCount":518},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[7232,7233],"CVE-2025-6051","PYSEC-2026-1988",[297,7233],"2025-09-14T18:30:26Z","2026-09-10T03:50:28.694224028Z",[7238],{"type":2245,"score":3105},[7240,7242,7244,7246,7248,7249,7251,7252],{"type":2213,"url":7241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2210,"url":7243},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2210,"url":7245},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2210,"url":7247},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2218,"url":2402},{"type":2210,"url":7250},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2218,"url":2771},{"type":2213,"url":7253},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2409,2410,2411,2412],{"id":298,"slug":7256,"dossier":47,"summary":7257,"aliases":7258,"sourceIds":7261,"published":7262,"modified":7263,"checkedAt":7,"severity":7264,"references":7267,"versionKeys":7276,"packageCount":32,"repositoryCount":2233},"ghsa-rfgq-q3w2-pmv2-908c42cd","Pillow: Image.quantize() with empty palette leaks uninitialized stack memory",[7259,7260],"BIT-pillow-2026-112898","CVE-2026-112898",[298],"2026-10-21T20:44:07Z","2026-10-26T08:55:50.383984569Z",[7265],{"type":2206,"score":7266},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7268,7270,7272,7274,7275],{"type":2210,"url":7269},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-rfgq-q3w2-pmv2",{"type":2213,"url":7271},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112898",{"type":2210,"url":7273},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13943c8f857b22f073d30f0ef9b725a0d255f1a4",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":299,"slug":7278,"dossier":47,"summary":7279,"aliases":7280,"sourceIds":7282,"published":7283,"modified":7284,"checkedAt":7,"severity":7285,"references":7287,"versionKeys":7298,"packageCount":32,"repositoryCount":2622},"ghsa-rfpc-qcw5-3pc4-0d3cdd9c","filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",[7281],"CVE-2026-112939",[299],"2026-10-28T21:08:45Z","2026-10-28T21:15:05.584943666Z",[7286],{"type":2245,"score":5467},[7288,7290,7292,7294,7296,7297],{"type":2210,"url":7289},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-rfpc-qcw5-3pc4",{"type":2213,"url":7291},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112939",{"type":2210,"url":7293},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fpull\u002F836",{"type":2210,"url":7295},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002Feeceaa846cbe4df72718d94c8371ca1ab8f5b3cc",{"type":2218,"url":3350},{"type":2210,"url":3352},[3354,3355,3356,3357],{"id":300,"slug":7300,"dossier":47,"summary":7301,"aliases":7302,"sourceIds":7306,"published":5224,"modified":7307,"checkedAt":7,"severity":7308,"references":7311,"versionKeys":7329,"packageCount":32,"repositoryCount":2683},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[7303,7304,7305],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[300],"2026-09-10T03:49:48.419046410Z",[7309,7310],{"type":2245,"score":4589},{"type":2206,"score":7025},[7312,7314,7316,7318,7320,7322,7323,7325,7327],{"type":2213,"url":7313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2210,"url":7315},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2210,"url":7317},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2210,"url":7319},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2210,"url":7321},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2218,"url":2734},{"type":2210,"url":7324},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2210,"url":7326},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2210,"url":7328},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[7330,7331,7332,2746,2747,2748,3767,3768,3769,3770,3771,3772,3773],"pypi:torch@2.10.0","pypi:torch@2.11.0","pypi:torch@2.12.1",{"id":301,"slug":7334,"dossier":47,"summary":7335,"aliases":7336,"sourceIds":7338,"published":7339,"modified":7340,"checkedAt":7,"severity":7341,"references":7344,"versionKeys":7353,"packageCount":32,"repositoryCount":2622},"ghsa-v4x8-3wr5-3wq8-fa48bf99","filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",[7337],"CVE-2026-112940",[301],"2026-10-23T21:59:08Z","2026-10-23T22:15:04.432475030Z",[7342],{"type":2245,"score":7343},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7345,7347,7349,7350,7351,7352],{"type":2210,"url":7346},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-v4x8-3wr5-3wq8",{"type":2213,"url":7348},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112940",{"type":2210,"url":4828},{"type":2210,"url":4830},{"type":2218,"url":3350},{"type":2210,"url":3352},[3354,3355,3356,3357],{"id":302,"slug":7355,"dossier":47,"summary":7356,"aliases":7357,"sourceIds":7360,"published":7361,"modified":7362,"checkedAt":7,"severity":7363,"references":7367,"versionKeys":7379,"packageCount":32,"repositoryCount":2622},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[7358,7359],"CVE-2026-41205","PYSEC-2026-88",[302,7359],"2026-04-16T21:16:40Z","2026-09-10T03:51:03.377000392Z",[7364,7365],{"type":2245,"score":5904},{"type":2206,"score":7366},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7368,7370,7372,7374,7376,7377],{"type":2213,"url":7369},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2213,"url":7371},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2210,"url":7373},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2210,"url":7375},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2218,"url":2612},{"type":2210,"url":7378},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2620,2621],{"id":303,"slug":7381,"dossier":47,"summary":7382,"aliases":7383,"sourceIds":7386,"published":7387,"modified":7388,"checkedAt":7,"severity":7389,"references":7392,"versionKeys":7401,"packageCount":32,"repositoryCount":499},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[7384,7385],"CVE-2026-53540","PYSEC-2026-3040",[303,7385],"2026-06-15T20:23:45Z","2026-09-10T03:50:50.590441047Z",[7390],{"type":2245,"score":7391},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7393,7395,7396,7397,7399],{"type":2210,"url":7394},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2218,"url":3427},{"type":2218,"url":3429},{"type":2213,"url":7398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2213,"url":7400},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3553,3554,3555,3433],{"id":304,"slug":7403,"dossier":47,"summary":7404,"aliases":7405,"sourceIds":7409,"published":7410,"modified":7411,"checkedAt":7,"severity":7412,"references":7414,"versionKeys":7425,"packageCount":32,"repositoryCount":2683},"ghsa-v9pv-5gc8-w2m6-ece1573e","Pillow multi-frame loaders can reuse stale native image storage after mode transitions",[7406,7407,7408],"BIT-pillow-2026-96639","CVE-2026-96639","PYSEC-2026-4339",[304,7408],"2026-10-21T21:20:32.217Z","2026-10-29T10:55:37.663049285Z",[7413],{"type":2245,"score":3236},[7415,7417,7419,7421,7423,7424],{"type":2213,"url":7416},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pv-5gc8-w2m6",{"type":2213,"url":7418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-96639",{"type":2727,"url":7420},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10105",{"type":2253,"url":7422},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F78d97d994579aef81aafe123773d525f40f2522a",{"type":2218,"url":2219},{"type":2213,"url":2221},[2225,2226,2227,2228,2229,2230,2231,2232],{"id":305,"slug":7427,"dossier":47,"summary":7428,"aliases":7429,"sourceIds":7432,"published":7433,"modified":7434,"checkedAt":7,"severity":7435,"references":7437,"versionKeys":7448,"packageCount":32,"repositoryCount":499},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[7430,7431],"CVE-2026-53537","PYSEC-2026-3041",[305,7431],"2026-06-15T20:20:51Z","2026-09-10T03:50:50.585695996Z",[7436],{"type":2245,"score":4026},[7438,7440,7442,7443,7445,7447],{"type":2210,"url":7439},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2213,"url":7441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2218,"url":3427},{"type":2213,"url":7444},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2210,"url":7446},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2218,"url":3429},[3553,3554,3555,3433],{"id":306,"slug":7450,"dossier":47,"summary":7451,"aliases":7452,"sourceIds":7456,"published":5224,"modified":7457,"checkedAt":7,"severity":7458,"references":7461,"versionKeys":7476,"packageCount":32,"repositoryCount":66},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[7453,7454,7455],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[306],"2026-06-10T17:41:15.774477397Z",[7459,7460],{"type":2245,"score":4589},{"type":2206,"score":5229},[7462,7464,7465,7466,7467,7469,7470,7472,7474],{"type":2213,"url":7463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2210,"url":5234},{"type":2210,"url":5236},{"type":2210,"url":5238},{"type":2210,"url":7468},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2218,"url":2734},{"type":2210,"url":7471},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2210,"url":7473},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2210,"url":7475},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2746,2747,2748,3767,3768,3769,3770],{"id":307,"slug":7478,"dossier":47,"summary":7479,"aliases":7480,"sourceIds":7484,"published":7485,"modified":7486,"checkedAt":7,"severity":7487,"references":7489,"versionKeys":7503,"packageCount":32,"repositoryCount":2902},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[7481,7482,7483],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[307,7483],"2026-07-20T23:18:32Z","2026-09-10T03:50:53.107920034Z",[7488],{"type":2206,"score":2557},[7490,7492,7494,7496,7498,7499,7500,7501],{"type":2210,"url":7491},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2213,"url":7493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2210,"url":7495},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2210,"url":7497},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2218,"url":2219},{"type":2210,"url":3719},{"type":2218,"url":3721},{"type":2213,"url":7502},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":308,"slug":7505,"dossier":47,"summary":7506,"aliases":7507,"sourceIds":7510,"published":7511,"modified":7512,"checkedAt":7,"severity":7513,"references":7516,"versionKeys":7531,"packageCount":32,"repositoryCount":103},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[7508,7509],"CVE-2025-43859","PYSEC-2026-348",[308,7509],"2025-04-24T16:07:56Z","2026-10-27T16:45:03.535584040Z",[7514],{"type":2245,"score":7515},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7517,7519,7521,7523,7525,7527,7529],{"type":2210,"url":7518},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2213,"url":7520},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2210,"url":7522},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2210,"url":7524},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fh11\u002FPYSEC-2026-348.yaml",{"type":2218,"url":7526},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2218,"url":7528},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2213,"url":7530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[7532],"pypi:h11@0.14.0",{"id":309,"slug":7534,"dossier":47,"summary":7535,"aliases":7536,"sourceIds":7538,"published":7539,"modified":7540,"checkedAt":7,"severity":7541,"references":7543,"versionKeys":7550,"packageCount":32,"repositoryCount":2233},"ghsa-vx6w-vv9f-6gvg-f0d0a86e","Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit",[7537],"CVE-2026-112899",[309],"2026-10-20T20:53:21Z","2026-10-20T21:00:04.428653055Z",[7542],{"type":2206,"score":3859},[7544,7546,7548,7549],{"type":2210,"url":7545},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vx6w-vv9f-6gvg",{"type":2210,"url":7547},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3e8cc105588d1dfe062fcada0b6058c1b5f14b65",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":310,"slug":7552,"dossier":91,"summary":7553,"aliases":7554,"sourceIds":7557,"published":7558,"modified":7559,"checkedAt":7,"severity":7560,"references":7562,"versionKeys":7574,"packageCount":32,"repositoryCount":3874},"ghsa-vxq7-64xx-v4gw-3e875898","urllib3: HTTPResponse.stream()\u002Fread_chunked() buffers an unbounded chunk-size line into memory",[7555,7556],"CVE-2026-97689","PYSEC-2026-4177",[310,7556],"2026-09-30T14:46:18Z","2026-10-01T17:55:57.514829071Z",[7561],{"type":2206,"score":2659},[7563,7565,7567,7569,7570,7571,7572],{"type":2210,"url":7564},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",{"type":2213,"url":7566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-97689",{"type":2210,"url":7568},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fcd770b059b543be29298ea5c52afb0b1b090f5ed",{"type":2218,"url":2674},{"type":2210,"url":4550},{"type":2218,"url":2676},{"type":2213,"url":7573},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vxq7-64xx-v4gw",[2678,2679,2680,2681,2682,4555,4556],{"id":311,"slug":7576,"dossier":47,"summary":7577,"aliases":7578,"sourceIds":7581,"published":7582,"modified":7583,"checkedAt":7,"severity":7584,"references":7588,"versionKeys":7597,"packageCount":32,"repositoryCount":470},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[7579,7580],"CVE-2026-22815","PYSEC-2026-2094",[311,7580],"2026-04-01T19:45:17Z","2026-09-10T03:51:03.588955358Z",[7585,7586],{"type":2206,"score":3859},{"type":2206,"score":7587},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7589,7591,7593,7595,7596],{"type":2253,"url":7590},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2213,"url":7592},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2253,"url":7594},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2218,"url":2501},{"type":2213,"url":2646},[2505,2506,2507,2508,2509,2510,2511,2512],{"id":312,"slug":7599,"dossier":47,"summary":7600,"aliases":7601,"sourceIds":7604,"published":7605,"modified":7606,"checkedAt":7,"severity":7607,"references":7610,"versionKeys":7627,"packageCount":32,"repositoryCount":3774},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[7602,7603],"CVE-2025-68146","PYSEC-2026-1375",[312,7603],"2025-12-16T20:52:55Z","2026-09-10T03:50:32.252960082Z",[7608],{"type":2245,"score":7609},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7611,7613,7615,7616,7618,7620,7622,7623,7625],{"type":2210,"url":7612},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2210,"url":7614},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2218,"url":3350},{"type":2210,"url":7617},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2210,"url":7619},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2210,"url":7621},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2218,"url":7068},{"type":2213,"url":7624},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2213,"url":7626},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[3940,3941,3942,3943],{"id":313,"slug":7629,"dossier":47,"summary":7630,"aliases":7631,"sourceIds":7634,"published":7635,"modified":7636,"checkedAt":7,"severity":7637,"references":7640,"versionKeys":7649,"packageCount":32,"repositoryCount":2233},"ghsa-w889-685w-c8fh-9dd63a47","Pillow: Argument Injection in Ghostscript call, potentially leading into RCE",[7632,7633],"BIT-pillow-2026-112900","CVE-2026-112900",[313],"2026-10-21T19:58:44Z","2026-10-26T08:55:37.091976147Z",[7638],{"type":2206,"score":7639},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7641,7643,7645,7647,7648],{"type":2210,"url":7642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-w889-685w-c8fh",{"type":2213,"url":7644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112900",{"type":2210,"url":7646},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa2c363141da31a265dd536c945677db4b64f3ec9",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":314,"slug":7651,"dossier":47,"summary":7652,"aliases":7653,"sourceIds":7656,"published":7657,"modified":7658,"checkedAt":7,"severity":7659,"references":7665,"versionKeys":7700,"packageCount":32,"repositoryCount":103},"ghsa-wf93-45jw-7689-98dc514d","pip: Path traversal in console_scripts\u002Fgui_scripts entry point names allows installing scripts outside of target directory",[7654,7655],"CVE-2026-8643","PYSEC-2026-196",[314,7655],"2026-06-01T17:17:35.770Z","2026-09-10T03:51:09.636289073Z",[7660,7662,7664],{"type":2245,"score":7661},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2206,"score":7663},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":5670},[7666,7668,7670,7672,7674,7676,7678,7680,7682,7684,7686,7687,7689,7691,7693,7695,7696,7698],{"type":2213,"url":7667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-8643",{"type":2253,"url":7669},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F14000",{"type":2210,"url":7671},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:33313",{"type":2210,"url":7673},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34776",{"type":2210,"url":7675},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34777",{"type":2210,"url":7677},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34778",{"type":2210,"url":7679},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34780",{"type":2210,"url":7681},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34891",{"type":2210,"url":7683},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36193",{"type":2210,"url":7685},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36315",{"type":2210,"url":5365},{"type":2210,"url":7688},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37283",{"type":2210,"url":7690},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-8643",{"type":2210,"url":7692},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2460927",{"type":2210,"url":7694},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpip\u002FPYSEC-2026-196.yaml",{"type":2218,"url":3169},{"type":2213,"url":7697},"https:\u002F\u002Fmail.python.org\u002Farchives\u002Flist\u002Fsecurity-announce@python.org\u002Fthread\u002FYV63UET5D3OOJY7O4M5XCVYO2YM4NBYJ\u002F",{"type":2213,"url":7699},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf93-45jw-7689",[3181,3182],{"id":315,"slug":7702,"dossier":47,"summary":7703,"aliases":7704,"sourceIds":7708,"published":7709,"modified":7710,"checkedAt":7,"severity":7711,"references":7714,"versionKeys":7752,"packageCount":32,"repositoryCount":2683},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[7705,7706,7707],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[315,7707],"2026-04-13T19:22:35Z","2026-09-10T03:51:03.847830288Z",[7712,7713],{"type":2245,"score":2329},{"type":2206,"score":2557},[7715,7717,7719,7721,7723,7724,7726,7728,7730,7732,7734,7736,7737,7739,7741,7743,7744,7746,7748,7750],{"type":2210,"url":7716},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2213,"url":7718},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2210,"url":7720},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2210,"url":7722},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2218,"url":2219},{"type":2210,"url":7725},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2210,"url":7727},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2210,"url":7729},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2213,"url":7731},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2213,"url":7733},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2213,"url":7735},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2213,"url":5022},{"type":2213,"url":7738},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2213,"url":7740},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2213,"url":7742},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2213,"url":5024},{"type":2213,"url":7745},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2213,"url":7747},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2213,"url":7749},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2213,"url":7751},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2223,2224,2225,2226,2227,2228,2229,2230],{"id":316,"slug":7754,"dossier":47,"summary":7755,"aliases":7756,"sourceIds":7760,"published":7761,"modified":7762,"checkedAt":7,"severity":7763,"references":7766,"versionKeys":7775,"packageCount":32,"repositoryCount":2683},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[7757,7758,7759],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[316,7759],"2026-05-04T20:18:45Z","2026-09-10T03:50:47.950262681Z",[7764,7765],{"type":2245,"score":2722},{"type":2206,"score":3679},[7767,7769,7771,7773,7774],{"type":2213,"url":7768},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2213,"url":7770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2210,"url":7772},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2218,"url":2219},{"type":2213,"url":3693},[2223,2224,2225,2226,2227,2228,2229,2230],{"id":317,"slug":7777,"dossier":47,"summary":7778,"aliases":7779,"sourceIds":7782,"published":7783,"modified":7784,"checkedAt":7,"severity":7785,"references":7788,"versionKeys":7801,"packageCount":32,"repositoryCount":34},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[7780,7781],"CVE-2026-24486","PYSEC-2026-1852",[317,7781],"2026-01-26T23:28:05Z","2026-09-10T03:50:59.359593372Z",[7786],{"type":2245,"score":7787},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[7789,7791,7793,7795,7796,7798,7799],{"type":2210,"url":7790},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2213,"url":7792},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2210,"url":7794},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2218,"url":3427},{"type":2210,"url":7797},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2218,"url":3429},{"type":2213,"url":7800},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3553,3554,3433],{"id":318,"slug":7803,"dossier":47,"summary":7804,"aliases":7805,"sourceIds":7807,"published":7808,"modified":7809,"checkedAt":7,"severity":7810,"references":7811,"versionKeys":7820,"packageCount":32,"repositoryCount":2233},"ghsa-wqgw-9xfh-qf2g-351c6680","Pillow: Memory DoS in TIFF and EXIF IFD parsing via overlapping tag data",[7806],"CVE-2026-128066",[318],"2026-11-12T23:35:39Z","2026-11-12T23:45:03.298534910Z",[],[7812,7814,7816,7818,7819],{"type":2210,"url":7813},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wqgw-9xfh-qf2g",{"type":2210,"url":7815},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4908edaf7f416616784c7c03d8c1a60153710ffb",{"type":2210,"url":7817},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F4b63dffd8a6d980fa0e21b40832fa6cbf033eacf",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":319,"slug":7822,"dossier":47,"summary":7823,"aliases":7824,"sourceIds":7827,"published":7828,"modified":7829,"checkedAt":7,"severity":7830,"references":7832,"versionKeys":7854,"packageCount":32,"repositoryCount":470},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[7825,7826],"CVE-2026-48818","PYSEC-2026-2281",[319,7826],"2026-06-15T20:16:30Z","2026-09-10T03:50:51.079936646Z",[7831],{"type":2245,"score":5904},[7833,7835,7836,7838,7840,7842,7844,7846,7848,7850,7852],{"type":2213,"url":7834},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2218,"url":4294},{"type":2210,"url":7837},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2210,"url":7839},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2213,"url":7841},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2213,"url":7843},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2213,"url":7845},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2213,"url":7847},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2727,"url":7849},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2253,"url":7851},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2253,"url":7853},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2477,2478,2479,4301,4302,4303,4410,4411,4412],{"id":320,"slug":7856,"dossier":47,"summary":5995,"aliases":7857,"sourceIds":7860,"published":6000,"modified":7861,"checkedAt":7,"severity":7862,"references":7865,"versionKeys":7879,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[7858,7859],"CVE-2024-11393","PYSEC-2024-228",[320,7859],"2026-09-10T03:50:55.987633957Z",[7863,7864],{"type":2245,"score":6004},{"type":2245,"score":2351},[7866,7868,7869,7870,7871,7873,7875,7877],{"type":2213,"url":7867},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2210,"url":6010},{"type":2210,"url":6012},{"type":2218,"url":2402},{"type":2210,"url":7872},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2210,"url":7874},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2213,"url":7876},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2213,"url":7878},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2409],{"id":321,"slug":7881,"dossier":47,"summary":7882,"aliases":7883,"sourceIds":7887,"published":7888,"modified":7889,"checkedAt":7,"severity":7890,"references":7895,"versionKeys":7911,"packageCount":32,"repositoryCount":380},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[7884,7885,7886],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[321],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[7891,7893],{"type":2245,"score":7892},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2206,"score":7894},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7896,7898,7900,7902,7904,7905,7907,7909],{"type":2213,"url":7897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2210,"url":7899},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2210,"url":7901},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2210,"url":7903},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2218,"url":2734},{"type":2210,"url":7906},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2210,"url":7908},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2210,"url":7910},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2746,2747],{"id":322,"slug":7913,"dossier":47,"summary":7914,"aliases":7915,"sourceIds":7918,"published":7919,"modified":7920,"checkedAt":7,"severity":7921,"references":7923,"versionKeys":7930,"packageCount":32,"repositoryCount":470},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[7916,7917],"CVE-2026-48817","PYSEC-2026-2280",[322,7917],"2026-06-15T20:16:05Z","2026-09-10T03:50:12.272722043Z",[7922],{"type":2245,"score":2636},[7924,7926,7928,7929],{"type":2213,"url":7925},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2213,"url":7927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2218,"url":4294},{"type":2213,"url":7847},[2477,2478,2479,4301,4302,4303,4410,4411,4412],{"id":323,"slug":7932,"dossier":47,"summary":7933,"aliases":7934,"sourceIds":7937,"published":7938,"modified":7939,"checkedAt":7,"severity":7940,"references":7942,"versionKeys":7957,"packageCount":32,"repositoryCount":66},"ghsa-x9r9-c232-4q39-1586e326","Hugging Face Transformers downloads custom generation code before trust consent",[7935,7936],"CVE-2026-80047","PYSEC-2026-4174",[323,7936],"2026-09-01T15:31:13Z","2026-10-01T17:55:55.397425521Z",[7941],{"type":2245,"score":6922},[7943,7945,7947,7949,7950,7952,7954,7955],{"type":2213,"url":7944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-80047",{"type":2210,"url":7946},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F48620",{"type":2210,"url":7948},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fcbc1651a032b923da7f4b44b3d0e6f68e6ba6b55",{"type":2218,"url":2402},{"type":2210,"url":7951},"https:\u002F\u002Fkb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":2210,"url":7953},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F456290",{"type":2218,"url":2771},{"type":2213,"url":7956},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x9r9-c232-4q39",[2410,2411,2412,2413,2414,2415,2416,2417,7958],"pypi:transformers@5.8.0",{"id":324,"slug":7960,"dossier":47,"summary":7961,"aliases":7962,"sourceIds":7965,"published":7966,"modified":7967,"checkedAt":7,"severity":7968,"references":7971,"versionKeys":7977,"packageCount":32,"repositoryCount":66},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[7963,7964],"CVE-2026-54274","PYSEC-2026-2108",[324,7964],"2026-06-15T20:11:22Z","2026-09-10T03:50:12.346397944Z",[7969,7970],{"type":2206,"score":2983},{"type":2245,"score":2329},[7972,7974,7975],{"type":2213,"url":7973},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2218,"url":2501},{"type":2253,"url":7976},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2505,2506,2507,2508,2509,2510,2511,2512,2513],{"id":325,"slug":7979,"dossier":47,"summary":7980,"aliases":7981,"sourceIds":7983,"published":7984,"modified":7985,"checkedAt":7,"severity":7986,"references":7988,"versionKeys":8000,"packageCount":32,"repositoryCount":480},"ghsa-xcq7-p3pf-p88h-7e00dc8e","OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api",[7982],"CVE-2026-114603",[325],"2026-10-22T16:22:07Z","2026-10-22T16:30:40.999595074Z",[7987],{"type":2245,"score":2430},[7989,7991,7993,7995,7996,7998],{"type":2210,"url":7990},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fsecurity\u002Fadvisories\u002FGHSA-xcq7-p3pf-p88h",{"type":2210,"url":7992},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fpull\u002F5749",{"type":2210,"url":7994},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fcommit\u002Fd5224bf4ffdf2aee1b592ad238dcc32ca957f26b",{"type":2218,"url":6380},{"type":2210,"url":7997},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Fblob\u002Fmain\u002FCHANGELOG.md#version-1451066b1-2026-10-06",{"type":2210,"url":7999},"https:\u002F\u002Fgithub.com\u002Fopen-telemetry\u002Fopentelemetry-python\u002Freleases\u002Ftag\u002Fv1.45.1",[6384,6385,6386,6387,6388,6389,6390,6391],{"id":326,"slug":8002,"dossier":47,"summary":8003,"aliases":8004,"sourceIds":8006,"published":8007,"modified":8008,"checkedAt":7,"severity":8009,"references":8012,"versionKeys":8021,"packageCount":32,"repositoryCount":2233},"ghsa-xcvg-w56q-r89m-87c516ac","Pillow: Heap buffer overflow saving TIFF with libtiff when tags override image size",[8005],"CVE-2026-128067",[326],"2026-11-12T23:34:43Z","2026-11-12T23:45:03.322245161Z",[8010],{"type":2206,"score":8011},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8013,8015,8017,8019,8020],{"type":2210,"url":8014},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xcvg-w56q-r89m",{"type":2210,"url":8016},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F53318b50e8e9e85a57d033d4d879e1398d97aeb1",{"type":2210,"url":8018},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fec5f1cbcf67275641abaad5c065ffb64a0a804a9",{"type":2218,"url":2219},{"type":2210,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":327,"slug":8023,"dossier":47,"summary":8024,"aliases":8025,"sourceIds":8029,"published":8030,"modified":8031,"checkedAt":7,"severity":8032,"references":8034,"versionKeys":8048,"packageCount":32,"repositoryCount":518},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[8026,8027,8028],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[327,8028],"2025-07-01T17:29:37Z","2026-09-10T03:50:26.431657121Z",[8033],{"type":2245,"score":7343},[8035,8037,8039,8041,8043,8045,8046],{"type":2213,"url":8036},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2213,"url":8038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2210,"url":8040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2253,"url":8042},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2210,"url":8044},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2218,"url":2219},{"type":2210,"url":8047},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2226],{"id":328,"slug":8050,"dossier":47,"summary":8051,"aliases":8052,"sourceIds":8056,"published":8057,"modified":8058,"checkedAt":7,"severity":8059,"references":8062,"versionKeys":8071,"packageCount":32,"repositoryCount":2233},"ghsa-xgh8-jp6q-p5x8-0a8d4f1f","Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes",[8053,8054,8055],"BIT-pillow-2026-112901","CVE-2026-112901","PYSEC-2026-4335",[328,8055],"2026-10-19T22:17:10.293Z","2026-10-28T11:10:55.647541842Z",[8060,8061],{"type":2206,"score":3859},{"type":2245,"score":2329},[8063,8065,8067,8069,8070],{"type":2253,"url":8064},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xgh8-jp6q-p5x8",{"type":2213,"url":8066},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112901",{"type":2253,"url":8068},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F2852a3e3d568997ddec745fc800991f138878f4b",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":329,"slug":8073,"dossier":47,"summary":8074,"aliases":8075,"sourceIds":8079,"published":8080,"modified":8081,"checkedAt":7,"severity":8082,"references":8085,"versionKeys":8096,"packageCount":32,"repositoryCount":2902},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[8076,8077,8078],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[329,8078],"2026-07-14T17:17:14.487Z","2026-09-10T03:50:53.192759645Z",[8083],{"type":2245,"score":8084},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8086,8088,8090,8092,8094,8095],{"type":2404,"url":8087},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2213,"url":8089},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2253,"url":8091},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2253,"url":8093},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2218,"url":2219},{"type":2213,"url":3719},[2223,2224,2225,2226,2227,2228,2229,2230,2231],{"id":330,"slug":8098,"dossier":47,"summary":8099,"aliases":8100,"sourceIds":8101,"published":8102,"modified":8103,"checkedAt":7,"severity":8104,"references":8107,"versionKeys":8117,"packageCount":32,"repositoryCount":2233},"ghsa-xmj3-9gf7-h52w-d99c0028","setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation  Description",[],[330],"2026-10-23T21:44:11Z","2026-10-23T22:00:03.739009766Z",[8105],{"type":2206,"score":8106},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:A\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[8108,8110,8112,8114,8115],{"type":2210,"url":8109},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-xmj3-9gf7-h52w",{"type":2210,"url":8111},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F5329",{"type":2210,"url":8113},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F6d07b8d17890dda58d944ac51e58f54af92d52af",{"type":2218,"url":3522},{"type":2210,"url":8116},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv84.1.0",[3528,3529,3530,3531,5827,5828,5829,5830,5831,5832,5833,5834],{"id":331,"slug":8119,"dossier":47,"summary":8120,"aliases":8121,"sourceIds":8124,"published":8125,"modified":8126,"checkedAt":7,"severity":8127,"references":8130,"versionKeys":8143,"packageCount":32,"repositoryCount":42},"ghsa-xrqw-3rrv-vx5w-3d985837","Transformers save_pretrained path traversal allows arbitrary file writes through chat template names",[8122,8123],"CVE-2026-9856","PYSEC-2026-3929",[331,8123],"2026-08-02T18:30:20Z","2026-09-10T12:25:36.528730268Z",[8128],{"type":2245,"score":8129},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[8131,8133,8135,8137,8138,8140,8141],{"type":2213,"url":8132},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9856",{"type":2210,"url":8134},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F46191",{"type":2210,"url":8136},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Feaaaf8494dd5386634ae37d1d122212fdc315be5",{"type":2218,"url":2402},{"type":2210,"url":8139},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F362824d5-fe18-40e8-a6cf-62277f97a170",{"type":2218,"url":2771},{"type":2213,"url":8142},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xrqw-3rrv-vx5w",[2409,2410,2411,2412,2413,2414,2415,2416,2417,7958],{"id":332,"slug":8145,"dossier":47,"summary":8146,"aliases":8147,"sourceIds":8150,"published":8151,"modified":8152,"checkedAt":7,"severity":8153,"references":8158,"versionKeys":8173,"packageCount":32,"repositoryCount":2233},"ghsa-xvh5-g6gv-559v-e12340aa","Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags",[8148,8149],"CVE-2026-112902","PYSEC-2026-4363",[332,8149],"2026-10-21T21:29:16Z","2026-11-11T10:20:03.066593346Z",[8154,8156],{"type":2206,"score":8155},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2245,"score":8157},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[8159,8161,8163,8165,8167,8169,8171,8172],{"type":2253,"url":8160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xvh5-g6gv-559v",{"type":2213,"url":8162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-112902",{"type":2210,"url":8164},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F10903",{"type":2253,"url":8166},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F10227",{"type":2253,"url":8168},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F570df030c0d30c2bf5336b2ab59f3902d8ab0b6d",{"type":2210,"url":8170},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Faf56ace297b0991d02988fcc2ea933e4824b4fb3",{"type":2218,"url":2219},{"type":2213,"url":2221},[2223,2224,2225,2226,2227,2228,2229,2230,2231,2232],{"id":333,"slug":8175,"dossier":47,"summary":387,"aliases":8176,"sourceIds":8179,"published":8180,"modified":8181,"checkedAt":7,"severity":8182,"references":8184,"versionKeys":8193,"packageCount":32,"repositoryCount":380},"pysec-2025-198-62b25ed4",[8177,8178],"BIT-pytorch-2025-46148","CVE-2025-46148",[333],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[8183],{"type":2245,"score":3834},[8185,8187,8189,8191],{"type":2213,"url":8186},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2213,"url":8188},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2727,"url":8190},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2253,"url":8192},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2746,2747],{"id":334,"slug":8195,"dossier":47,"summary":387,"aliases":8196,"sourceIds":8199,"published":8200,"modified":8201,"checkedAt":7,"severity":8202,"references":8204,"versionKeys":8210,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[8197,8198],"BIT-pytorch-2025-46149","CVE-2025-46149",[334],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[8203],{"type":2245,"score":3834},[8205,8206,8208],{"type":2213,"url":8186},{"type":2727,"url":8207},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2253,"url":8209},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2747],{"id":335,"slug":8212,"dossier":47,"summary":387,"aliases":8213,"sourceIds":8216,"published":8217,"modified":8218,"checkedAt":7,"severity":8219,"references":8221,"versionKeys":8229,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[8214,8215],"BIT-pytorch-2025-46150","CVE-2025-46150",[335],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[8220],{"type":2245,"score":3834},[8222,8223,8225,8227],{"type":2213,"url":8186},{"type":2727,"url":8224},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2727,"url":8226},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2253,"url":8228},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2747],{"id":336,"slug":8231,"dossier":47,"summary":387,"aliases":8232,"sourceIds":8235,"published":8236,"modified":8237,"checkedAt":7,"severity":8238,"references":8240,"versionKeys":8246,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[8233,8234],"BIT-pytorch-2025-46152","CVE-2025-46152",[336],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[8239],{"type":2245,"score":2430},[8241,8242,8244],{"type":2213,"url":8186},{"type":2727,"url":8243},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2253,"url":8245},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2747],{"id":337,"slug":8248,"dossier":47,"summary":387,"aliases":8249,"sourceIds":8252,"published":8253,"modified":8254,"checkedAt":7,"severity":8255,"references":8257,"versionKeys":8267,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[8250,8251],"BIT-pytorch-2025-46153","CVE-2025-46153",[337],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[8256],{"type":2245,"score":3834},[8258,8260,8261,8263,8265],{"type":2210,"url":8259},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2213,"url":8186},{"type":2213,"url":8262},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2727,"url":8264},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2253,"url":8266},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2747],{"id":338,"slug":8269,"dossier":47,"summary":387,"aliases":8270,"sourceIds":8273,"published":8274,"modified":8275,"checkedAt":7,"severity":8276,"references":8278,"versionKeys":8283,"packageCount":32,"repositoryCount":108},"pysec-2025-203-2febb201",[8271,8272],"BIT-pytorch-2025-55551","CVE-2025-55551",[338],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[8277],{"type":2245,"score":2329},[8279,8281],{"type":2213,"url":8280},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2727,"url":8282},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2746,2747,2748,3767,3768,3769],{"id":339,"slug":8285,"dossier":47,"summary":387,"aliases":8286,"sourceIds":8289,"published":8290,"modified":8291,"checkedAt":7,"severity":8292,"references":8294,"versionKeys":8298,"packageCount":32,"repositoryCount":108},"pysec-2025-204-cdae47da",[8287,8288],"BIT-pytorch-2025-55552","CVE-2025-55552",[339],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[8293],{"type":2245,"score":2329},[8295,8296],{"type":2213,"url":8280},{"type":2727,"url":8297},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2746,2747,2748,3767,3768,3769],{"id":340,"slug":8300,"dossier":47,"summary":387,"aliases":8301,"sourceIds":8304,"published":8305,"modified":8306,"checkedAt":7,"severity":8307,"references":8309,"versionKeys":8315,"packageCount":32,"repositoryCount":103},"pysec-2025-205-fd5e58fd",[8302,8303],"BIT-pytorch-2025-55553","CVE-2025-55553",[340],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[8308],{"type":2245,"score":2329},[8310,8311,8313],{"type":2213,"url":8280},{"type":2727,"url":8312},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2253,"url":8314},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2746,2747,2748],{"id":341,"slug":8317,"dossier":47,"summary":387,"aliases":8318,"sourceIds":8321,"published":8322,"modified":8323,"checkedAt":7,"severity":8324,"references":8326,"versionKeys":8330,"packageCount":32,"repositoryCount":108},"pysec-2025-206-58322476",[8319,8320],"BIT-pytorch-2025-55554","CVE-2025-55554",[341],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[8325],{"type":2245,"score":2430},[8327,8328],{"type":2213,"url":8280},{"type":2727,"url":8329},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2746,2747,2748,3767,3768,3769],{"id":342,"slug":8332,"dossier":47,"summary":387,"aliases":8333,"sourceIds":8336,"published":8337,"modified":8338,"checkedAt":7,"severity":8339,"references":8341,"versionKeys":8347,"packageCount":32,"repositoryCount":103},"pysec-2025-207-2abef3fc",[8334,8335],"BIT-pytorch-2025-55557","CVE-2025-55557",[342],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[8340],{"type":2245,"score":2329},[8342,8343,8345],{"type":2213,"url":8280},{"type":2727,"url":8344},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2253,"url":8346},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2746,2747,2748],{"id":343,"slug":8349,"dossier":47,"summary":387,"aliases":8350,"sourceIds":8353,"published":8354,"modified":8355,"checkedAt":7,"severity":8356,"references":8358,"versionKeys":8364,"packageCount":32,"repositoryCount":103},"pysec-2025-208-6e93fe9d",[8351,8352],"BIT-pytorch-2025-55558","CVE-2025-55558",[343],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[8357],{"type":2245,"score":2329},[8359,8360,8362],{"type":2213,"url":8280},{"type":2727,"url":8361},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2253,"url":8363},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2746,2747,2748],{"id":344,"slug":8366,"dossier":47,"summary":387,"aliases":8367,"sourceIds":8370,"published":8371,"modified":8372,"checkedAt":7,"severity":8373,"references":8375,"versionKeys":8381,"packageCount":32,"repositoryCount":103},"pysec-2025-209-e6f352b0",[8368,8369],"BIT-pytorch-2025-55560","CVE-2025-55560",[344],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[8374],{"type":2245,"score":2329},[8376,8377,8379],{"type":2213,"url":8280},{"type":2727,"url":8378},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2253,"url":8380},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2746,2747,2748],{"id":345,"slug":8383,"dossier":47,"summary":387,"aliases":8384,"sourceIds":8386,"published":8387,"modified":8388,"checkedAt":7,"severity":8389,"references":8391,"versionKeys":8394,"packageCount":32,"repositoryCount":2622},"pysec-2025-211-d8bd15de",[8385],"CVE-2025-14920",[345],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[8390],{"type":2245,"score":2395},[8392],{"type":2213,"url":8393},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2409,2410,2411,2412,2413],{"id":346,"slug":8396,"dossier":47,"summary":387,"aliases":8397,"sourceIds":8399,"published":8400,"modified":8401,"checkedAt":7,"severity":8402,"references":8404,"versionKeys":8407,"packageCount":32,"repositoryCount":2622},"pysec-2025-212-a011b97d",[8398],"CVE-2025-14921",[346],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[8403],{"type":2245,"score":2395},[8405],{"type":2213,"url":8406},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2409,2410,2411,2412,2413],{"id":347,"slug":8409,"dossier":47,"summary":387,"aliases":8410,"sourceIds":8412,"published":8413,"modified":8414,"checkedAt":7,"severity":8415,"references":8417,"versionKeys":8420,"packageCount":32,"repositoryCount":2622},"pysec-2025-213-9043dc9b",[8411],"CVE-2025-14924",[347],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[8416],{"type":2245,"score":2395},[8418],{"type":2213,"url":8419},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2409,2410,2411,2412,2413],{"id":348,"slug":8422,"dossier":47,"summary":387,"aliases":8423,"sourceIds":8425,"published":8426,"modified":8427,"checkedAt":7,"severity":8428,"references":8430,"versionKeys":8433,"packageCount":32,"repositoryCount":2622},"pysec-2025-214-eb241255",[8424],"CVE-2025-14926",[348],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[8429],{"type":2245,"score":2395},[8431],{"type":2213,"url":8432},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2409,2410,2411,2412,2413],{"id":349,"slug":8435,"dossier":47,"summary":387,"aliases":8436,"sourceIds":8438,"published":8439,"modified":8440,"checkedAt":7,"severity":8441,"references":8443,"versionKeys":8446,"packageCount":32,"repositoryCount":2622},"pysec-2025-215-6064f491",[8437],"CVE-2025-14927",[349],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[8442],{"type":2245,"score":2395},[8444],{"type":2213,"url":8445},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2409,2410,2411,2412,2413],{"id":350,"slug":8448,"dossier":47,"summary":387,"aliases":8449,"sourceIds":8451,"published":8452,"modified":8453,"checkedAt":7,"severity":8454,"references":8456,"versionKeys":8459,"packageCount":32,"repositoryCount":2622},"pysec-2025-216-5708ed01",[8450],"CVE-2025-14928",[350],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[8455],{"type":2245,"score":2395},[8457],{"type":2213,"url":8458},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2409,2410,2411,2412,2413],{"id":351,"slug":8461,"dossier":47,"summary":387,"aliases":8462,"sourceIds":8464,"published":8465,"modified":8466,"checkedAt":7,"severity":8467,"references":8469,"versionKeys":8472,"packageCount":32,"repositoryCount":66},"pysec-2025-217-2c1ad388",[8463],"CVE-2025-14929",[351],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[8468],{"type":2245,"score":2395},[8470],{"type":2213,"url":8471},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2409,2410,2411,2412,2413,2414,2415,2416,2417],{"id":352,"slug":8474,"dossier":47,"summary":387,"aliases":8475,"sourceIds":8477,"published":8478,"modified":8479,"checkedAt":7,"severity":8480,"references":8482,"versionKeys":8485,"packageCount":32,"repositoryCount":480},"pysec-2025-218-39811fc3",[8476],"CVE-2025-14930",[352],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[8481],{"type":2245,"score":2395},[8483],{"type":2213,"url":8484},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2409,2410,2411,2412,2413,2414],{"id":353,"slug":8487,"dossier":47,"summary":387,"aliases":8488,"sourceIds":8491,"published":8492,"modified":8493,"checkedAt":7,"severity":8494,"references":8496,"versionKeys":8507,"packageCount":32,"repositoryCount":2383},"pysec-2026-139-96951ff6",[8489,8490],"BIT-pytorch-2026-4538","CVE-2026-4538",[353],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[8495],{"type":2245,"score":6922},[8497,8499,8501,8503,8505],{"type":2210,"url":8498},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2213,"url":8500},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2213,"url":8502},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2727,"url":8504},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2253,"url":8506},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[7330,2746,2747,2748,3767,3768,3769,3770,3771,3772,3773],1794732141976]