[{"data":1,"prerenderedAt":9958},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-4112":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":382,"related":385},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":90,"resolvedComponentCount":98,"artifactResolvedComponentCount":98,"exactManifestPinCount":37,"packageCount":98,"ecosystems":99,"aiPackageCount":101,"licenseExpressionCount":68,"unknownLicensePackageCount":32,"advisoryIds":102,"advisoryCount":380,"providers":381},"opencode:4112","opencode-4112",4112,"Objection management","uba-ki-lab\u002Fobjection-management","automatic processing of objections; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, FKTG, Endlagersuche","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management","5c1425bf9990cf12c5ae8ada47d249710703af18","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fcommit\u002F5c1425bf9990cf12c5ae8ada47d249710703af18","2025-01-13T11:14:51.399Z","2025-01-13T11:49:00.000Z",{"complete":89,"entryCount":30,"truncated":45},true,[91],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},"uv-lock","8515db65670904208e99397a2d7878af759c74f3","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fobjection-management\u002F-\u002Fblob\u002F5c1425bf9990cf12c5ae8ada47d249710703af18\u002Fuv.lock","b084b72cc0723df0070f68ab42b2cd9c5447aa6df20204916c3de53c04f4c363",829617,"parsed",261,[100],"pypi",13,[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379],"GHSA-248m-82v9-q6g6","GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2h4p-vjrc-8xpq","GHSA-2q4j-m29v-hq73","GHSA-2rw7-x74f-jg35","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-33p9-3p43-82vq","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3crg-w4f6-42mx","GHSA-3j69-69wj-xqx2","GHSA-3r9x-f23j-gc73","GHSA-3wq7-rqq7-wx6j","GHSA-3x9g-8vmp-wqvf","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4f6g-68pf-7vhv","GHSA-4fvr-rgm6-gqmc","GHSA-4g5m-c9r5-49xf","GHSA-4m7w-qmgq-4wj5","GHSA-4pxv-j86v-mhcw","GHSA-4vvm-4w3v-6mr8","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xc4-762w-m6cg","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-52x6-gq3r-vpf4","GHSA-537c-gmf6-5ccf","GHSA-538c-55jv-c5g9","GHSA-53mr-6c8q-9789","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-55h5-xmcq-c37v","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5gjj-6r7v-ph3x","GHSA-5hgr-hg42-57jg","GHSA-5jmr-gcrj-2c9q","GHSA-5qjq-93h5-hrgp","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xf7-4p34-54qr","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-6528-wvf6-f6qg","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-69x8-hrgq-fjj8","GHSA-6hm5-jgcp-p838","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-72m8-9m7m-h278","GHSA-7488-6r32-c95q","GHSA-752w-5fwx-jx9f","GHSA-768j-98cg-p3fv","GHSA-78cv-mqj4-43f7","GHSA-79v4-65xg-pq4g","GHSA-7cx3-6m66-7c5m","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7gw9-cf7v-778f","GHSA-7hfw-26vp-jp8m","GHSA-7p94-766c-hgjp","GHSA-82w8-qh3p-5jfq","GHSA-836r-79rf-4m37","GHSA-848c-c2cx-j7qx","GHSA-86qp-5c8j-p5mr","GHSA-87mj-5ggw-8qc3","GHSA-887c-mr87-cxwp","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-993g-76c3-p5m4","GHSA-996q-pr4m-cvgq","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9m86-7pmv-2852","GHSA-9mvc-8737-8j8h","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c38f-wx89-p2xg","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-c98p-7wgm-6p64","GHSA-cfh3-3jmp-rvhc","GHSA-cj93-chg6-vgv8","GHSA-cmw6-hcpp-c6jp","GHSA-cpwx-vrp4-4pq7","GHSA-cq27-v7xp-c356","GHSA-cq5v-8q36-5273","GHSA-cx3h-4qpv-8hc9","GHSA-cx63-2mw6-8hw5","GHSA-f2v5-7jq9-h8cg","GHSA-f4hp-rmr7-r7v8","GHSA-f83h-ghpp-7wcc","GHSA-f96h-pmfr-66vw","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fhv5-28vv-h8m8","GHSA-fj7v-r99m-22gq","GHSA-fjcf-3j3r-78rp","GHSA-fp3f-mc75-235c","GHSA-fpwr-67px-3qhx","GHSA-fwg2-594c-jp42","GHSA-g3cq-j2xw-wf74","GHSA-g6cj-pr64-35w5","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-g867-7843-wf8q","GHSA-g9xf-7f8q-9mcj","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gm8q-m8mv-jj5m","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hm4w-wwcw-mr6r","GHSA-hp6r-r9vc-q8wx","GHSA-hpj7-wq8m-9hgp","GHSA-hqmh-ppp3-xvm7","GHSA-hqmj-h5c6-369m","GHSA-hwpq-hmq9-wj77","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-j225-cvw7-qrx7","GHSA-j543-4vmf-qm7v","GHSA-jfx9-29x2-rv3j","GHSA-jg22-mg44-37j8","GHSA-jhmp-mqwm-3gq8","GHSA-jj3x-wxrx-4x23","GHSA-jj6c-8h6c-hppx","GHSA-jjhc-v7c2-5hh6","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jm82-fx9c-mx94","GHSA-jp82-jpqv-5vv3","GHSA-jq35-7prp-9v3f","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m2v9-299j-rv96","GHSA-m449-cwjh-6pw7","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mgf9-4vpg-hj56","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrfv-m5wm-5w6w","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p433-9wv8-28xj","GHSA-p4gq-832x-fm9v","GHSA-p893-rvq9-2xf9","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pp6c-gr5w-3c5g","GHSA-pq67-6m6q-mj2v","GHSA-pr2v-jx2c-wg9f","GHSA-pw6j-qg29-8w7f","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q56x-g2fj-4rj6","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qjxf-f2mg-c6mc","GHSA-qmgc-5h2g-mvrw","GHSA-qpxp-75px-xjcp","GHSA-qq3j-4f4f-9583","GHSA-qrc4-49gv-mv9m","GHSA-qvv7-cg9c-w4x3","GHSA-qxrp-vhvm-j765","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vr63-x8vc-m265","GHSA-vvw2-h478-xwr3","GHSA-w2fm-2cpv-w7v5","GHSA-w7vc-732c-9m39","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wf5f-4jwr-ppcp","GHSA-wgvc-ghv9-3pmm","GHSA-wgvp-vg3v-2xq3","GHSA-whj4-6x5x-4v2j","GHSA-wjqc-6w8f-h24c","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-wrfc-pvp9-mr9g","GHSA-x284-j5p8-9c5p","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-x7hp-r3qg-r3cj","GHSA-xcgm-r5h9-7989","GHSA-xf7x-x43h-rpqh","GHSA-xg8h-j46f-w952","GHSA-xgmm-8j9v-c9wx","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","PYSEC-2025-148","PYSEC-2025-183","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-597","PYSEC-2026-99",277,[],{"files":383,"occurrenceCount":98},[384],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},{"packages":386,"vulnerabilities":2752},[387,401,413,424,433,443,452,462,472,481,490,499,508,517,527,538,550,560,569,580,589,599,608,618,627,638,647,658,668,677,688,697,706,715,724,733,743,752,761,770,779,788,797,806,815,824,833,844,852,861,870,879,888,897,906,916,925,934,944,953,962,971,980,989,998,1007,1016,1025,1034,1043,1052,1061,1070,1079,1088,1097,1107,1117,1126,1135,1144,1153,1162,1171,1180,1189,1198,1207,1215,1224,1233,1242,1251,1260,1269,1279,1288,1297,1306,1314,1323,1332,1341,1350,1359,1368,1377,1385,1394,1403,1412,1421,1430,1441,1450,1458,1467,1476,1485,1494,1503,1512,1521,1530,1539,1548,1557,1566,1575,1584,1593,1602,1611,1620,1629,1638,1647,1656,1665,1674,1683,1692,1701,1709,1717,1726,1735,1744,1753,1761,1770,1779,1788,1797,1807,1816,1825,1835,1844,1853,1861,1869,1878,1887,1896,1905,1914,1923,1931,1939,1948,1957,1965,1974,1983,1993,2002,2011,2019,2028,2037,2046,2055,2063,2072,2081,2090,2099,2108,2116,2125,2133,2142,2151,2160,2169,2178,2187,2196,2205,2214,2223,2232,2241,2250,2259,2267,2276,2285,2295,2303,2312,2321,2330,2338,2347,2356,2365,2374,2383,2392,2400,2409,2418,2426,2435,2444,2453,2462,2471,2480,2489,2498,2507,2515,2524,2533,2542,2550,2559,2568,2577,2585,2594,2603,2612,2621,2630,2639,2647,2656,2665,2674,2683,2691,2700,2709,2718,2726,2734,2743],{"id":388,"slug":389,"identity":390,"label":391,"aiRelevant":89,"provider":392,"advisoryCount":395,"licenseExpressions":396,"versions":398,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":400},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":393,"label":394},"hugging-face","Hugging Face",25,[397],"Apache-2.0",[399],"4.47.1",[54],{"id":402,"slug":403,"identity":404,"label":405,"aiRelevant":89,"provider":406,"advisoryCount":407,"licenseExpressions":408,"versions":410,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":412},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[409],"BSD-3-Clause",[411],"2.5.1",[54],{"id":414,"slug":415,"identity":416,"label":417,"aiRelevant":89,"provider":406,"advisoryCount":418,"licenseExpressions":419,"versions":421,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":423},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",12,[420],"MIT",[422],"1.53.7",[54],{"id":425,"slug":426,"identity":427,"label":428,"aiRelevant":89,"provider":406,"advisoryCount":32,"licenseExpressions":429,"versions":430,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":432},"package:pypi:dspy","dspy-70e56922","pypi:dspy","DSPy",[420],[431],"2.5.43",[54],{"id":434,"slug":435,"identity":436,"label":437,"aiRelevant":89,"provider":438,"advisoryCount":37,"licenseExpressions":439,"versions":440,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":442},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":393,"label":394},[397],[441],"3.2.0",[54],{"id":70,"slug":71,"identity":444,"label":72,"aiRelevant":89,"provider":445,"advisoryCount":37,"licenseExpressions":448,"versions":449,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":451},"pypi:openai",{"id":446,"label":447},"openai","OpenAI",[397],[450],"1.59.6",[54],{"id":453,"slug":454,"identity":455,"label":456,"aiRelevant":89,"provider":457,"advisoryCount":37,"licenseExpressions":458,"versions":459,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":461},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":393,"label":394},[397],[460],"3.3.1",[54],{"id":463,"slug":464,"identity":465,"label":466,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":467,"versions":469,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":471},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[468],"non-standard",[470],"1.2.1",[54],{"id":473,"slug":474,"identity":475,"label":476,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":477,"versions":478,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":480},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[468],[479],"0.21.0",[54],{"id":482,"slug":483,"identity":484,"label":485,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":486,"versions":487,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":489},"package:pypi:opencv-python","opencv-python-bfa06e24","pypi:opencv-python","OpenCV",[397],[488],"4.10.0.84",[54],{"id":491,"slug":492,"identity":493,"label":494,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":495,"versions":496,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":498},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[409,468],[497],"1.6.1",[54],{"id":500,"slug":501,"identity":502,"label":503,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":504,"versions":505,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":507},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[468],[506],"0.8.0",[54],{"id":509,"slug":510,"identity":511,"label":512,"aiRelevant":89,"provider":406,"advisoryCount":37,"licenseExpressions":513,"versions":514,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":516},"package:pypi:xgboost","xgboost-5a870b45","pypi:xgboost","XGBoost",[397],[515],"2.1.3",[54],{"id":518,"slug":519,"identity":520,"label":521,"aiRelevant":45,"provider":406,"advisoryCount":522,"licenseExpressions":523,"versions":524,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":526},"package:pypi:pypdf","pypdf-a4757bde","pypi:pypdf","pypdf",37,[409,468],[525],"5.1.0",[54],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":45,"provider":406,"advisoryCount":532,"licenseExpressions":533,"versions":535,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":537},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[397,534],"Apache-2.0 AND MIT",[536],"3.11.11",[54],{"id":539,"slug":540,"identity":541,"label":542,"aiRelevant":45,"provider":406,"advisoryCount":543,"licenseExpressions":544,"versions":547,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":549},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[545,546],"HPND","MIT-CMU",[548],"11.1.0",[54],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":45,"provider":406,"advisoryCount":555,"licenseExpressions":556,"versions":557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",16,[397],[558],"3.9.1",[54],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":406,"advisoryCount":40,"licenseExpressions":565,"versions":566,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:tornado","tornado-ab0f364e","pypi:tornado","tornado",[397],[567],"6.4.2",[54],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":406,"advisoryCount":574,"licenseExpressions":575,"versions":577,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":579},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[576],"Apache-2.0 OR BSD-3-Clause",[578],"42.0.8",[54],{"id":581,"slug":582,"identity":583,"label":584,"aiRelevant":45,"provider":406,"advisoryCount":574,"licenseExpressions":585,"versions":586,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":588},"package:pypi:onnx","onnx-d9802411","pypi:onnx","onnx",[397],[587],"1.17.0",[54],{"id":590,"slug":591,"identity":592,"label":593,"aiRelevant":45,"provider":406,"advisoryCount":594,"licenseExpressions":595,"versions":596,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":598},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[397],[597],"0.0.9",[54],{"id":600,"slug":601,"identity":602,"label":603,"aiRelevant":45,"provider":406,"advisoryCount":594,"licenseExpressions":604,"versions":605,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":607},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[409],[606],"0.37.2",[54],{"id":609,"slug":610,"identity":611,"label":612,"aiRelevant":45,"provider":406,"advisoryCount":613,"licenseExpressions":614,"versions":615,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":617},"package:pypi:pyjwt","pyjwt-b1ea166e","pypi:pyjwt","pyjwt",7,[420],[616],"2.10.1",[54],{"id":619,"slug":620,"identity":621,"label":622,"aiRelevant":45,"provider":406,"advisoryCount":613,"licenseExpressions":623,"versions":624,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":626},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",[420],[625],"2.3.0",[54],{"id":628,"slug":629,"identity":630,"label":631,"aiRelevant":45,"provider":406,"advisoryCount":632,"licenseExpressions":633,"versions":635,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":637},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[634],"BSD-2-Clause",[636],"0.6.1",[54],{"id":639,"slug":640,"identity":641,"label":642,"aiRelevant":45,"provider":406,"advisoryCount":34,"licenseExpressions":643,"versions":644,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":646},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[409,468],[645],"3.1.5",[54],{"id":648,"slug":649,"identity":650,"label":651,"aiRelevant":45,"provider":406,"advisoryCount":34,"licenseExpressions":652,"versions":655,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":657},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[409,653,654],"BSD-3-Clause AND TCL","TCL",[656],"5.10.0",[54],{"id":659,"slug":660,"identity":661,"label":662,"aiRelevant":45,"provider":406,"advisoryCount":663,"licenseExpressions":664,"versions":665,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":667},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[397],[666],"2.32.3",[54],{"id":669,"slug":670,"identity":671,"label":672,"aiRelevant":45,"provider":406,"advisoryCount":663,"licenseExpressions":673,"versions":674,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":676},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[420],[675],"75.8.0",[54],{"id":678,"slug":679,"identity":680,"label":681,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":683,"versions":685,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":687},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[420,684],"Unlicense",[686],"3.16.1",[54],{"id":689,"slug":690,"identity":691,"label":692,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":693,"versions":694,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":696},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[420],[695],"1.3.8",[54],{"id":698,"slug":699,"identity":700,"label":701,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":702,"versions":703,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":705},"package:pypi:pdfminer-six","pdfminer-six-53ae17a4","pypi:pdfminer-six","pdfminer-six",[420],[704],"20240706",[54],{"id":707,"slug":708,"identity":709,"label":710,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":711,"versions":712,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":714},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[409],[713],"5.29.3",[54],{"id":716,"slug":717,"identity":718,"label":719,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":720,"versions":721,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":723},"package:pypi:pycrypto","pycrypto-0df8b923","pypi:pycrypto","pycrypto",[468],[722],"2.6.1",[54],{"id":725,"slug":726,"identity":727,"label":728,"aiRelevant":45,"provider":406,"advisoryCount":682,"licenseExpressions":729,"versions":730,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":732},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[420],[731],"2.6",[54],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":738,"versions":740,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":742},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[739],"MPL-2.0",[741],"2024.12.14",[54],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":748,"versions":749,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":751},"package:pypi:click","click-ef97f731","pypi:click","click",[409,468],[750],"8.1.8",[54],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":757,"versions":758,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":760},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[397],[759],"5.6.3",[54],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":766,"versions":767,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":769},"package:pypi:fastapi-sso","fastapi-sso-0ed97bae","pypi:fastapi-sso","fastapi-sso",[420],[768],"0.10.0",[54],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":775,"versions":776,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":778},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[420],[777],"4.55.3",[54],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":784,"versions":785,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":787},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[420],[786],"0.14.0",[54],{"id":789,"slug":790,"identity":791,"label":792,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":793,"versions":794,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":796},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[409,468],[795],"3.10",[54],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":802,"versions":803,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":805},"package:pypi:json-repair","json-repair-3bbcd372","pypi:json-repair","json-repair",[468],[804],"0.35.0",[54],{"id":807,"slug":808,"identity":809,"label":810,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":811,"versions":812,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":814},"package:pypi:jupyter-core","jupyter-core-44178c79","pypi:jupyter-core","jupyter-core",[409,468],[813],"5.7.2",[54],{"id":816,"slug":817,"identity":818,"label":819,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":820,"versions":821,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":823},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[409],[822],"5.3.0",[54],{"id":825,"slug":826,"identity":827,"label":828,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":829,"versions":830,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":832},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[420],[831],"3.24.2",[54],{"id":834,"slug":835,"identity":836,"label":837,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":838,"versions":841,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":843},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[839,840],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[842],"3.10.14",[54],{"id":845,"slug":846,"identity":847,"label":848,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":849,"versions":850,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":851},"package:pypi:pi-heif","pi-heif-b188197b","pypi:pi-heif","pi-heif",[409],[479],[54],{"id":853,"slug":854,"identity":855,"label":856,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":857,"versions":858,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":860},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[397,468],[859],"18.1.0",[54],{"id":862,"slug":863,"identity":864,"label":865,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":866,"versions":867,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":869},"package:pypi:pycryptodome","pycryptodome-44737a20","pypi:pycryptodome","pycryptodome",[468],[868],"3.10.1",[54],{"id":871,"slug":872,"identity":873,"label":874,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":875,"versions":876,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":878},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[634],[877],"2.19.1",[54],{"id":880,"slug":881,"identity":882,"label":883,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":884,"versions":885,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":887},"package:pypi:pynacl","pynacl-0a554710","pypi:pynacl","pynacl",[397],[886],"1.5.0",[54],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":893,"versions":894,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":896},"package:pypi:pypdf2","pypdf2-eea60a87","pypi:pypdf2","pypdf2",[468],[895],"3.0.1",[54],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":902,"versions":903,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":905},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[409],[904],"1.0.1",[54],{"id":907,"slug":908,"identity":909,"label":910,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":911,"versions":913,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":915},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[912],"MIT AND MPL-2.0",[914],"4.67.1",[54],{"id":917,"slug":918,"identity":919,"label":920,"aiRelevant":45,"provider":406,"advisoryCount":32,"licenseExpressions":921,"versions":922,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":924},"package:pypi:unstructured","unstructured-9ec9bd94","pypi:unstructured","unstructured",[397],[923],"0.16.12",[54],{"id":926,"slug":927,"identity":928,"label":929,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":930,"versions":931,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":933},"package:pypi:aiofiles","aiofiles-41b094bb","pypi:aiofiles","aiofiles",[397],[932],"24.1.0",[54],{"id":935,"slug":936,"identity":937,"label":938,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":939,"versions":941,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":943},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[940],"PSF-2.0",[942],"2.4.4",[54],{"id":945,"slug":946,"identity":947,"label":948,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":949,"versions":950,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":952},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[397],[951],"1.3.2",[54],{"id":954,"slug":955,"identity":956,"label":957,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":958,"versions":959,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":961},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[420],[960],"1.14.0",[54],{"id":963,"slug":964,"identity":965,"label":966,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":967,"versions":968,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":970},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[420],[969],"0.7.0",[54],{"id":972,"slug":973,"identity":974,"label":975,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":976,"versions":977,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":979},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[468],[978],"4.9.3",[54],{"id":981,"slug":982,"identity":983,"label":984,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":985,"versions":986,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":988},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[420],[987],"4.8.0",[54],{"id":990,"slug":991,"identity":992,"label":993,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":994,"versions":995,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":997},"package:pypi:appnope","appnope-1881f8cd","pypi:appnope","appnope",[468],[996],"0.1.4",[54],{"id":999,"slug":1000,"identity":1001,"label":1002,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1003,"versions":1004,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1006},"package:pypi:apscheduler","apscheduler-d0079a7e","pypi:apscheduler","apscheduler",[420],[1005],"3.11.0",[54],{"id":1008,"slug":1009,"identity":1010,"label":1011,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1012,"versions":1013,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1015},"package:pypi:asttokens","asttokens-c349c5f9","pypi:asttokens","asttokens",[397],[1014],"3.0.0",[54],{"id":1017,"slug":1018,"identity":1019,"label":1020,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1021,"versions":1022,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1024},"package:pypi:async-timeout","async-timeout-218334ed","pypi:async-timeout","async-timeout",[397],[1023],"5.0.1",[54],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1030,"versions":1031,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1033},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[420],[1032],"0.0.8",[54],{"id":1035,"slug":1036,"identity":1037,"label":1038,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1039,"versions":1040,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1042},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[420],[1041],"24.3.0",[54],{"id":1044,"slug":1045,"identity":1046,"label":1047,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1048,"versions":1049,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1051},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[420],[1050],"2.2.1",[54],{"id":1053,"slug":1054,"identity":1055,"label":1056,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1057,"versions":1058,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1060},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[420],[1059],"4.12.3",[54],{"id":1062,"slug":1063,"identity":1064,"label":1065,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1066,"versions":1067,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1069},"package:pypi:blis","blis-b338dbfd","pypi:blis","blis",[409],[1068],"1.1.0",[54],{"id":1071,"slug":1072,"identity":1073,"label":1074,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1075,"versions":1076,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1078},"package:pypi:bs4","bs4-8083bff2","pypi:bs4","bs4",[420],[1077],"0.0.2",[54],{"id":1080,"slug":1081,"identity":1082,"label":1083,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1084,"versions":1085,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1087},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[420],[1086],"5.5.0",[54],{"id":1089,"slug":1090,"identity":1091,"label":1092,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1093,"versions":1094,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1096},"package:pypi:catalogue","catalogue-fc77ee14","pypi:catalogue","catalogue",[420],[1095],"2.0.10",[54],{"id":1098,"slug":1099,"identity":1100,"label":1101,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1102,"versions":1104,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1106},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[420,1103],"MIT-0",[1105],"1.17.1",[54],{"id":1108,"slug":1109,"identity":1110,"label":1111,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1112,"versions":1114,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1116},"package:pypi:chardet","chardet-69451fbd","pypi:chardet","chardet",[1113,468],"0BSD",[1115],"5.2.0",[54],{"id":1118,"slug":1119,"identity":1120,"label":1121,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1122,"versions":1123,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1125},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[420],[1124],"3.4.1",[54],{"id":1127,"slug":1128,"identity":1129,"label":1130,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1131,"versions":1132,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1134},"package:pypi:cloudpathlib","cloudpathlib-2ee84451","pypi:cloudpathlib","cloudpathlib",[420],[1133],"0.20.0",[54],{"id":1136,"slug":1137,"identity":1138,"label":1139,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1140,"versions":1141,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1143},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[409],[1142],"3.1.0",[54],{"id":1145,"slug":1146,"identity":1147,"label":1148,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1149,"versions":1150,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1152},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[468],[1151],"0.4.6",[54],{"id":1154,"slug":1155,"identity":1156,"label":1157,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1158,"versions":1159,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1161},"package:pypi:coloredlogs","coloredlogs-941daca5","pypi:coloredlogs","coloredlogs",[420],[1160],"15.0.1",[54],{"id":1163,"slug":1164,"identity":1165,"label":1166,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1167,"versions":1168,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1170},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[420],[1169],"6.9.0",[54],{"id":1172,"slug":1173,"identity":1174,"label":1175,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1176,"versions":1177,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1179},"package:pypi:comm","comm-0720ed7b","pypi:comm","comm",[468],[1178],"0.2.2",[54],{"id":1181,"slug":1182,"identity":1183,"label":1184,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1185,"versions":1186,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1188},"package:pypi:confection","confection-f28e9d5d","pypi:confection","confection",[420],[1187],"0.1.5",[54],{"id":1190,"slug":1191,"identity":1192,"label":1193,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1194,"versions":1195,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1197},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[468],[1196],"1.3.1",[54],{"id":1199,"slug":1200,"identity":1201,"label":1202,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1203,"versions":1204,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1206},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[468],[1205],"0.12.1",[54],{"id":1208,"slug":1209,"identity":1210,"label":1211,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1212,"versions":1213,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1214},"package:pypi:cymem","cymem-9e21fc01","pypi:cymem","cymem",[420],[1095],[54],{"id":1216,"slug":1217,"identity":1218,"label":1219,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1220,"versions":1221,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1223},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[420],[1222],"0.6.7",[54],{"id":1225,"slug":1226,"identity":1227,"label":1228,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1229,"versions":1230,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1232},"package:pypi:debugpy","debugpy-71725cbb","pypi:debugpy","debugpy",[420],[1231],"1.8.11",[54],{"id":1234,"slug":1235,"identity":1236,"label":1237,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1238,"versions":1239,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1241},"package:pypi:decorator","decorator-500c1fb8","pypi:decorator","decorator",[634,468],[1240],"5.1.1",[54],{"id":1243,"slug":1244,"identity":1245,"label":1246,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1247,"versions":1248,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1250},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[420],[1249],"1.2.15",[54],{"id":1252,"slug":1253,"identity":1254,"label":1255,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1256,"versions":1257,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1259},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[409],[1258],"0.3.8",[54],{"id":1261,"slug":1262,"identity":1263,"label":1264,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1265,"versions":1266,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1268},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[397],[1267],"1.9.0",[54],{"id":1270,"slug":1271,"identity":1272,"label":1273,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1274,"versions":1276,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1278},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1275],"ISC",[1277],"2.7.0",[54],{"id":1280,"slug":1281,"identity":1282,"label":1283,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1284,"versions":1285,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1287},"package:pypi:effdet","effdet-fa41b694","pypi:effdet","effdet",[397],[1286],"0.4.1",[54],{"id":1289,"slug":1290,"identity":1291,"label":1292,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1293,"versions":1294,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1296},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[684],[1295],"2.2.0",[54],{"id":1298,"slug":1299,"identity":1300,"label":1301,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1302,"versions":1303,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1305},"package:pypi:emoji","emoji-b8402ff3","pypi:emoji","emoji",[409,468],[1304],"2.14.0",[54],{"id":1307,"slug":1308,"identity":1309,"label":1310,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1311,"versions":1312,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1313},"package:pypi:eval-type-backport","eval-type-backport-a648ef5a","pypi:eval-type-backport","eval-type-backport",[420],[1178],[54],{"id":1315,"slug":1316,"identity":1317,"label":1318,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1319,"versions":1320,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1322},"package:pypi:evaluate","evaluate-18162fdd","pypi:evaluate","evaluate",[397],[1321],"0.4.3",[54],{"id":1324,"slug":1325,"identity":1326,"label":1327,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1328,"versions":1329,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1331},"package:pypi:exceptiongroup","exceptiongroup-316db5d9","pypi:exceptiongroup","exceptiongroup",[420],[1330],"1.2.2",[54],{"id":1333,"slug":1334,"identity":1335,"label":1336,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1337,"versions":1338,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1340},"package:pypi:executing","executing-36845a5b","pypi:executing","executing",[420],[1339],"2.1.0",[54],{"id":1342,"slug":1343,"identity":1344,"label":1345,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1346,"versions":1347,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1349},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[420],[1348],"0.111.1",[54],{"id":1351,"slug":1352,"identity":1353,"label":1354,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1355,"versions":1356,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1358},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[420],[1357],"0.0.7",[54],{"id":1360,"slug":1361,"identity":1362,"label":1363,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1364,"versions":1365,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1367},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[420],[1366],"1.2.0",[54],{"id":1369,"slug":1370,"identity":1371,"label":1372,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1373,"versions":1374,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1376},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[397],[1375],"24.12.23",[54],{"id":1378,"slug":1379,"identity":1380,"label":1381,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1382,"versions":1383,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1384},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[397],[886],[54],{"id":1386,"slug":1387,"identity":1388,"label":1389,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1390,"versions":1391,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1393},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[409,468],[1392],"2024.9.0",[54],{"id":1395,"slug":1396,"identity":1397,"label":1398,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1399,"versions":1400,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1402},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[397],[1401],"2.24.0",[54],{"id":1404,"slug":1405,"identity":1406,"label":1407,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1408,"versions":1409,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1411},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[397],[1410],"2.37.0",[54],{"id":1413,"slug":1414,"identity":1415,"label":1416,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1417,"versions":1418,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1420},"package:pypi:google-cloud-vision","google-cloud-vision-53fabd8a","pypi:google-cloud-vision","google-cloud-vision",[397],[1419],"3.9.0",[54],{"id":1422,"slug":1423,"identity":1424,"label":1425,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1426,"versions":1427,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1429},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[397],[1428],"1.66.0",[54],{"id":1431,"slug":1432,"identity":1433,"label":1434,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1435,"versions":1438,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1440},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[420,1436,1437],"MIT AND PSF-2.0","MIT AND Python-2.0",[1439],"3.1.1",[54],{"id":1442,"slug":1443,"identity":1444,"label":1445,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1446,"versions":1447,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1449},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[397],[1448],"1.69.0",[54],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1455,"versions":1456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1457},"package:pypi:grpcio-status","grpcio-status-f4c90de4","pypi:grpcio-status","grpcio-status",[397],[1448],[54],{"id":1459,"slug":1460,"identity":1461,"label":1462,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1463,"versions":1464,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1466},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[420],[1465],"22.0.0",[54],{"id":1468,"slug":1469,"identity":1470,"label":1471,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1472,"versions":1473,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1475},"package:pypi:html5lib","html5lib-0ea30fe2","pypi:html5lib","html5lib",[420],[1474],"1.1",[54],{"id":1477,"slug":1478,"identity":1479,"label":1480,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1481,"versions":1482,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1484},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[409],[1483],"1.0.7",[54],{"id":1486,"slug":1487,"identity":1488,"label":1489,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1490,"versions":1491,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1493},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[420],[1492],"0.6.4",[54],{"id":1495,"slug":1496,"identity":1497,"label":1498,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1499,"versions":1500,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1502},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[409],[1501],"0.27.2",[54],{"id":1504,"slug":1505,"identity":1506,"label":1507,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1508,"versions":1509,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1511},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[397,468],[1510],"0.27.1",[54],{"id":1513,"slug":1514,"identity":1515,"label":1516,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1517,"versions":1518,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1520},"package:pypi:humanfriendly","humanfriendly-8694dbe5","pypi:humanfriendly","humanfriendly",[420],[1519],"10.0",[54],{"id":1522,"slug":1523,"identity":1524,"label":1525,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1526,"versions":1527,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1529},"package:pypi:imbalanced-learn","imbalanced-learn-efacef92","pypi:imbalanced-learn","imbalanced-learn",[420],[1528],"0.13.0",[54],{"id":1531,"slug":1532,"identity":1533,"label":1534,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1535,"versions":1536,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1538},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[397,468],[1537],"8.5.0",[54],{"id":1540,"slug":1541,"identity":1542,"label":1543,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1544,"versions":1545,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1547},"package:pypi:iopath","iopath-9dbbc2b2","pypi:iopath","iopath",[468],[1546],"0.1.10",[54],{"id":1549,"slug":1550,"identity":1551,"label":1552,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1553,"versions":1554,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1556},"package:pypi:ipykernel","ipykernel-37162218","pypi:ipykernel","ipykernel",[409,468],[1555],"6.29.5",[54],{"id":1558,"slug":1559,"identity":1560,"label":1561,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1562,"versions":1563,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1565},"package:pypi:ipython","ipython-7a140323","pypi:ipython","ipython",[409],[1564],"8.31.0",[54],{"id":1567,"slug":1568,"identity":1569,"label":1570,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1571,"versions":1572,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1574},"package:pypi:ipywidgets","ipywidgets-5079daea","pypi:ipywidgets","ipywidgets",[409],[1573],"8.1.5",[54],{"id":1576,"slug":1577,"identity":1578,"label":1579,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1580,"versions":1581,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1583},"package:pypi:jedi","jedi-9eb0c211","pypi:jedi","jedi",[420],[1582],"0.19.2",[54],{"id":1585,"slug":1586,"identity":1587,"label":1588,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1589,"versions":1590,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1592},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[420],[1591],"0.8.2",[54],{"id":1594,"slug":1595,"identity":1596,"label":1597,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1598,"versions":1599,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1601},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[409],[1600],"1.4.2",[54],{"id":1603,"slug":1604,"identity":1605,"label":1606,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1607,"versions":1608,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1610},"package:pypi:jsonpath-python","jsonpath-python-54762115","pypi:jsonpath-python","jsonpath-python",[420],[1609],"1.0.6",[54],{"id":1612,"slug":1613,"identity":1614,"label":1615,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1616,"versions":1617,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1619},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[420],[1618],"4.23.0",[54],{"id":1621,"slug":1622,"identity":1623,"label":1624,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1625,"versions":1626,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1628},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[420],[1627],"2024.10.1",[54],{"id":1630,"slug":1631,"identity":1632,"label":1633,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1634,"versions":1635,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1637},"package:pypi:jupyter-client","jupyter-client-3b4db88c","pypi:jupyter-client","jupyter-client",[468],[1636],"8.6.3",[54],{"id":1639,"slug":1640,"identity":1641,"label":1642,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1643,"versions":1644,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1646},"package:pypi:jupyterlab-widgets","jupyterlab-widgets-e76ed5e8","pypi:jupyterlab-widgets","jupyterlab-widgets",[409,468],[1645],"3.0.13",[54],{"id":1648,"slug":1649,"identity":1650,"label":1651,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1652,"versions":1653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1655},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[468],[1654],"1.4.8",[54],{"id":1657,"slug":1658,"identity":1659,"label":1660,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1661,"versions":1662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1664},"package:pypi:langcodes","langcodes-237af017","pypi:langcodes","langcodes",[420],[1663],"3.5.0",[54],{"id":1666,"slug":1667,"identity":1668,"label":1669,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1670,"versions":1671,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1673},"package:pypi:langdetect","langdetect-3c0edcca","pypi:langdetect","langdetect",[420],[1672],"1.0.9",[54],{"id":1675,"slug":1676,"identity":1677,"label":1678,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1679,"versions":1680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1682},"package:pypi:language-data","language-data-9194e1a5","pypi:language-data","language-data",[420],[1681],"1.3.0",[54],{"id":1684,"slug":1685,"identity":1686,"label":1687,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1688,"versions":1689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1691},"package:pypi:layoutparser","layoutparser-db3aa325","pypi:layoutparser","layoutparser",[397],[1690],"0.3.4",[54],{"id":1693,"slug":1694,"identity":1695,"label":1696,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1697,"versions":1698,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1700},"package:pypi:magicattr","magicattr-40bff089","pypi:magicattr","magicattr",[420],[1699],"0.1.6",[54],{"id":1702,"slug":1703,"identity":1704,"label":1705,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1706,"versions":1707,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1708},"package:pypi:marisa-trie","marisa-trie-06f80e2d","pypi:marisa-trie","marisa-trie",[420],[470],[54],{"id":1710,"slug":1711,"identity":1712,"label":1713,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1714,"versions":1715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1716},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[420],[1014],[54],{"id":1718,"slug":1719,"identity":1720,"label":1721,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1722,"versions":1723,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1725},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[409,468],[1724],"3.0.2",[54],{"id":1727,"slug":1728,"identity":1729,"label":1730,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1731,"versions":1732,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1734},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[468],[1733],"3.10.0",[54],{"id":1736,"slug":1737,"identity":1738,"label":1739,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1740,"versions":1741,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1743},"package:pypi:matplotlib-inline","matplotlib-inline-50f95e0d","pypi:matplotlib-inline","matplotlib-inline",[409,468],[1742],"0.1.7",[54],{"id":1745,"slug":1746,"identity":1747,"label":1748,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1749,"versions":1750,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1752},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[420],[1751],"0.1.2",[54],{"id":1754,"slug":1755,"identity":1756,"label":1757,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1758,"versions":1759,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1760},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[468],[1681],[54],{"id":1762,"slug":1763,"identity":1764,"label":1765,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1766,"versions":1767,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1769},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[397],[1768],"6.1.0",[54],{"id":1771,"slug":1772,"identity":1773,"label":1774,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1775,"versions":1776,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1778},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[409],[1777],"0.70.16",[54],{"id":1780,"slug":1781,"identity":1782,"label":1783,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1784,"versions":1785,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1787},"package:pypi:murmurhash","murmurhash-576fddb8","pypi:murmurhash","murmurhash",[420],[1786],"1.0.11",[54],{"id":1789,"slug":1790,"identity":1791,"label":1792,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1793,"versions":1794,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1796},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[420],[1795],"1.0.0",[54],{"id":1798,"slug":1799,"identity":1800,"label":1801,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1802,"versions":1804,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1806},"package:pypi:ndjson","ndjson-64ad2467","pypi:ndjson","ndjson",[1803],"GPL-3.0",[1805],"0.3.1",[54],{"id":1808,"slug":1809,"identity":1810,"label":1811,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1812,"versions":1813,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1815},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[468],[1814],"1.6.0",[54],{"id":1817,"slug":1818,"identity":1819,"label":1820,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1821,"versions":1822,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1824},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[409,468],[1823],"3.4.2",[54],{"id":1826,"slug":1827,"identity":1828,"label":1829,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1830,"versions":1832,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1834},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1831,468],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1833],"1.26.4",[54],{"id":1836,"slug":1837,"identity":1838,"label":1839,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1840,"versions":1841,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1843},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[468],[1842],"12.4.5.8",[54],{"id":1845,"slug":1846,"identity":1847,"label":1848,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1849,"versions":1850,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1852},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[468],[1851],"12.4.127",[54],{"id":1854,"slug":1855,"identity":1856,"label":1857,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1858,"versions":1859,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1860},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[468],[1851],[54],{"id":1862,"slug":1863,"identity":1864,"label":1865,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1866,"versions":1867,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1868},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[468],[1851],[54],{"id":1870,"slug":1871,"identity":1872,"label":1873,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1874,"versions":1875,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1877},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[468],[1876],"9.1.0.70",[54],{"id":1879,"slug":1880,"identity":1881,"label":1882,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1883,"versions":1884,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1886},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[468],[1885],"11.2.1.3",[54],{"id":1888,"slug":1889,"identity":1890,"label":1891,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1892,"versions":1893,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1895},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[468],[1894],"10.3.5.147",[54],{"id":1897,"slug":1898,"identity":1899,"label":1900,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1901,"versions":1902,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1904},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[468],[1903],"11.6.1.9",[54],{"id":1906,"slug":1907,"identity":1908,"label":1909,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1910,"versions":1911,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1913},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[468],[1912],"12.3.1.170",[54],{"id":1915,"slug":1916,"identity":1917,"label":1918,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1919,"versions":1920,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1922},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[409,468],[1921],"2.21.5",[54],{"id":1924,"slug":1925,"identity":1926,"label":1927,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1928,"versions":1929,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1930},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[468],[1851],[54],{"id":1932,"slug":1933,"identity":1934,"label":1935,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1936,"versions":1937,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1938},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[397,468],[1851],[54],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1944,"versions":1945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1947},"package:pypi:oauthlib","oauthlib-5d97cdbc","pypi:oauthlib","oauthlib",[409,468],[1946],"3.2.2",[54],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1953,"versions":1954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1956},"package:pypi:olefile","olefile-c842b5c6","pypi:olefile","olefile",[468],[1955],"0.47",[54],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1962,"versions":1963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1964},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[409],[625],[54],{"id":1966,"slug":1967,"identity":1968,"label":1969,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1970,"versions":1971,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1973},"package:pypi:onnxruntime","onnxruntime-5acdb617","pypi:onnxruntime","onnxruntime",[420],[1972],"1.20.1",[54],{"id":1975,"slug":1976,"identity":1977,"label":1978,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1979,"versions":1980,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1982},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[409,420],[1981],"4.1.0",[54],{"id":1984,"slug":1985,"identity":1986,"label":1987,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1988,"versions":1990,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1992},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1989,468],"Apache-2.0 OR BSD-2-Clause",[1991],"24.2",[54],{"id":1994,"slug":1995,"identity":1996,"label":1997,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":1998,"versions":1999,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2001},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[468],[2000],"2.2.3",[54],{"id":2003,"slug":2004,"identity":2005,"label":2006,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2007,"versions":2008,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2010},"package:pypi:parso","parso-fa59fdde","pypi:parso","parso",[420],[2009],"0.8.4",[54],{"id":2012,"slug":2013,"identity":2014,"label":2015,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2016,"versions":2017,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2018},"package:pypi:pdf2image","pdf2image-0ecc86ea","pypi:pdf2image","pdf2image",[420],[587],[54],{"id":2020,"slug":2021,"identity":2022,"label":2023,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2024,"versions":2025,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2027},"package:pypi:pdfplumber","pdfplumber-ba8dca54","pypi:pdfplumber","pdfplumber",[420],[2026],"0.5.3",[54],{"id":2029,"slug":2030,"identity":2031,"label":2032,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2033,"versions":2034,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2036},"package:pypi:pexpect","pexpect-9ad65a0c","pypi:pexpect","pexpect",[468],[2035],"4.9.0",[54],{"id":2038,"slug":2039,"identity":2040,"label":2041,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2042,"versions":2043,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2045},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[739],[2044],"9.5.1",[54],{"id":2047,"slug":2048,"identity":2049,"label":2050,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2051,"versions":2052,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2054},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[420],[2053],"4.3.6",[54],{"id":2056,"slug":2057,"identity":2058,"label":2059,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2060,"versions":2061,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2062},"package:pypi:portalocker","portalocker-889424fa","pypi:portalocker","portalocker",[409],[1439],[54],{"id":2064,"slug":2065,"identity":2066,"label":2067,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2068,"versions":2069,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2071},"package:pypi:preshed","preshed-ccc69f08","pypi:preshed","preshed",[420],[2070],"3.0.9",[54],{"id":2073,"slug":2074,"identity":2075,"label":2076,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2077,"versions":2078,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2080},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[409,468],[2079],"3.0.48",[54],{"id":2082,"slug":2083,"identity":2084,"label":2085,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2086,"versions":2087,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2089},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[397],[2088],"0.2.1",[54],{"id":2091,"slug":2092,"identity":2093,"label":2094,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2095,"versions":2096,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2098},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[397],[2097],"1.25.0",[54],{"id":2100,"slug":2101,"identity":2102,"label":2103,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2104,"versions":2105,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2107},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[409],[2106],"6.1.1",[54],{"id":2109,"slug":2110,"identity":2111,"label":2112,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2113,"versions":2114,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2115},"package:pypi:ptyprocess","ptyprocess-ec2650c7","pypi:ptyprocess","ptyprocess",[1275],[969],[54],{"id":2117,"slug":2118,"identity":2119,"label":2120,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2121,"versions":2122,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2124},"package:pypi:pure-eval","pure-eval-24d2bc1c","pypi:pure-eval","pure-eval",[420],[2123],"0.2.3",[54],{"id":2126,"slug":2127,"identity":2128,"label":2129,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2130,"versions":2131,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2132},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[468],[1286],[54],{"id":2134,"slug":2135,"identity":2136,"label":2137,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2138,"versions":2139,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2141},"package:pypi:pycocotools","pycocotools-65bdc5df","pypi:pycocotools","pycocotools",[468],[2140],"2.0.8",[54],{"id":2143,"slug":2144,"identity":2145,"label":2146,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2147,"versions":2148,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2150},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[409],[2149],"2.22",[54],{"id":2152,"slug":2153,"identity":2154,"label":2155,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2156,"versions":2157,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2159},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[420],[2158],"2.9.2",[54],{"id":2161,"slug":2162,"identity":2163,"label":2164,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2165,"versions":2166,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2168},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[420],[2167],"2.23.4",[54],{"id":2170,"slug":2171,"identity":2172,"label":2173,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2174,"versions":2175,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2177},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[420],[2176],"3.2.1",[54],{"id":2179,"slug":2180,"identity":2181,"label":2182,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2183,"versions":2184,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2186},"package:pypi:pyreadline3","pyreadline3-e43706a5","pypi:pyreadline3","pyreadline3",[468],[2185],"3.5.4",[54],{"id":2188,"slug":2189,"identity":2190,"label":2191,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2192,"versions":2193,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2195},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[468],[2194],"2.9.0.post0",[54],{"id":2197,"slug":2198,"identity":2199,"label":2200,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2201,"versions":2202,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2204},"package:pypi:python-iso639","python-iso639-ccd49637","pypi:python-iso639","python-iso639",[397],[2203],"2024.10.22",[54],{"id":2206,"slug":2207,"identity":2208,"label":2209,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2210,"versions":2211,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2213},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[420],[2212],"0.4.27",[54],{"id":2215,"slug":2216,"identity":2217,"label":2218,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2219,"versions":2220,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2222},"package:pypi:python-oxmsg","python-oxmsg-1cecb37a","pypi:python-oxmsg","python-oxmsg",[420],[2221],"0.0.1",[54],{"id":2224,"slug":2225,"identity":2226,"label":2227,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2228,"versions":2229,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2231},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[420],[2230],"2024.2",[54],{"id":2233,"slug":2234,"identity":2235,"label":2236,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2237,"versions":2238,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2240},"package:pypi:pywin32","pywin32-9a7c83ae","pypi:pywin32","pywin32",[],[2239],"308",[54],{"id":2242,"slug":2243,"identity":2244,"label":2245,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2246,"versions":2247,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2249},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[420],[2248],"6.0.2",[54],{"id":2251,"slug":2252,"identity":2253,"label":2254,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2255,"versions":2256,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2258},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[468],[2257],"26.2.0",[54],{"id":2260,"slug":2261,"identity":2262,"label":2263,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2264,"versions":2265,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2266},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[420],[1005],[54],{"id":2268,"slug":2269,"identity":2270,"label":2271,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2272,"versions":2273,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2275},"package:pypi:redis","redis-94bd1499","pypi:redis","redis",[420],[2274],"5.2.1",[54],{"id":2277,"slug":2278,"identity":2279,"label":2280,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2281,"versions":2282,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2284},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[420],[2283],"0.35.1",[54],{"id":2286,"slug":2287,"identity":2288,"label":2289,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2290,"versions":2292,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2294},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[2291,468],"Apache-2.0 AND CNRI-Python",[2293],"2024.11.6",[54],{"id":2296,"slug":2297,"identity":2298,"label":2299,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2300,"versions":2301,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2302},"package:pypi:requests-toolbelt","requests-toolbelt-bb89e811","pypi:requests-toolbelt","requests-toolbelt",[397],[1795],[54],{"id":2304,"slug":2305,"identity":2306,"label":2307,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2308,"versions":2309,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2311},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[420],[2310],"13.9.4",[54],{"id":2313,"slug":2314,"identity":2315,"label":2316,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2317,"versions":2318,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2320},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[420],[2319],"0.12.0",[54],{"id":2322,"slug":2323,"identity":2324,"label":2325,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2326,"versions":2327,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2329},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[420],[2328],"0.22.3",[54],{"id":2331,"slug":2332,"identity":2333,"label":2334,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2335,"versions":2336,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2337},"package:pypi:rq","rq-30f38331","pypi:rq","rq",[634],[1339],[54],{"id":2339,"slug":2340,"identity":2341,"label":2342,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2343,"versions":2344,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2346},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[397],[2345],"4.9",[54],{"id":2348,"slug":2349,"identity":2350,"label":2351,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2352,"versions":2353,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2355},"package:pypi:ruamel-yaml","ruamel-yaml-4c58c99d","pypi:ruamel-yaml","ruamel-yaml",[420],[2354],"0.18.10",[54],{"id":2357,"slug":2358,"identity":2359,"label":2360,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2361,"versions":2362,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2364},"package:pypi:ruamel-yaml-clib","ruamel-yaml-clib-56105e16","pypi:ruamel-yaml-clib","ruamel-yaml-clib",[420],[2363],"0.2.12",[54],{"id":2366,"slug":2367,"identity":2368,"label":2369,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2370,"versions":2371,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2373},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[468],[2372],"0.5.2",[54],{"id":2375,"slug":2376,"identity":2377,"label":2378,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2379,"versions":2380,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2382},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[468],[2381],"1.15.0",[54],{"id":2384,"slug":2385,"identity":2386,"label":2387,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2388,"versions":2389,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2391},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[468],[2390],"1.5.4",[54],{"id":2393,"slug":2394,"identity":2395,"label":2396,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2397,"versions":2398,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2399},"package:pypi:six","six-3c3888bd","pypi:six","six",[420],[587],[54],{"id":2401,"slug":2402,"identity":2403,"label":2404,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2405,"versions":2406,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2408},"package:pypi:sklearn-compat","sklearn-compat-4332ec33","pypi:sklearn-compat","sklearn-compat",[468],[2407],"0.1.3",[54],{"id":2410,"slug":2411,"identity":2412,"label":2413,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2414,"versions":2415,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2417},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[420],[2416],"7.1.0",[54],{"id":2419,"slug":2420,"identity":2421,"label":2422,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2423,"versions":2424,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2425},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[839],[1196],[54],{"id":2427,"slug":2428,"identity":2429,"label":2430,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2431,"versions":2432,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2434},"package:pypi:spacy","spacy-c452aae3","pypi:spacy","spacy",[420],[2433],"3.8.3",[54],{"id":2436,"slug":2437,"identity":2438,"label":2439,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2440,"versions":2441,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2443},"package:pypi:spacy-legacy","spacy-legacy-9520d7df","pypi:spacy-legacy","spacy-legacy",[420],[2442],"3.0.12",[54],{"id":2445,"slug":2446,"identity":2447,"label":2448,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2449,"versions":2450,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2452},"package:pypi:spacy-loggers","spacy-loggers-6508f34b","pypi:spacy-loggers","spacy-loggers",[420],[2451],"1.0.5",[54],{"id":2454,"slug":2455,"identity":2456,"label":2457,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2458,"versions":2459,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2461},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[420],[2460],"2.0.37",[54],{"id":2463,"slug":2464,"identity":2465,"label":2466,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2467,"versions":2468,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2470},"package:pypi:srsly","srsly-ea9d0184","pypi:srsly","srsly",[420],[2469],"2.5.0",[54],{"id":2472,"slug":2473,"identity":2474,"label":2475,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2476,"versions":2477,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2479},"package:pypi:stack-data","stack-data-d640fe0e","pypi:stack-data","stack-data",[420],[2478],"0.6.3",[54],{"id":2481,"slug":2482,"identity":2483,"label":2484,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2485,"versions":2486,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2488},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[468],[2487],"1.13.1",[54],{"id":2490,"slug":2491,"identity":2492,"label":2493,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2494,"versions":2495,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2497},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[397],[2496],"9.0.0",[54],{"id":2499,"slug":2500,"identity":2501,"label":2502,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2503,"versions":2504,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2506},"package:pypi:thinc","thinc-32b2f7f5","pypi:thinc","thinc",[420],[2505],"8.3.3",[54],{"id":2508,"slug":2509,"identity":2510,"label":2511,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2512,"versions":2513,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2514},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[409],[1663],[54],{"id":2516,"slug":2517,"identity":2518,"label":2519,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2520,"versions":2521,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2523},"package:pypi:timm","timm-4594fb75","pypi:timm","timm",[397],[2522],"1.0.12",[54],{"id":2525,"slug":2526,"identity":2527,"label":2528,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2529,"versions":2530,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2532},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[468],[2531],"0.20.1",[54],{"id":2534,"slug":2535,"identity":2536,"label":2537,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2538,"versions":2539,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2541},"package:pypi:traitlets","traitlets-52bd6ddb","pypi:traitlets","traitlets",[468],[2540],"5.14.3",[54],{"id":2543,"slug":2544,"identity":2545,"label":2546,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2547,"versions":2548,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2549},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[420],[1142],[54],{"id":2551,"slug":2552,"identity":2553,"label":2554,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2555,"versions":2556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2558},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[420],[2557],"0.15.1",[54],{"id":2560,"slug":2561,"identity":2562,"label":2563,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2564,"versions":2565,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2567},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[940,468],[2566],"4.12.2",[54],{"id":2569,"slug":2570,"identity":2571,"label":2572,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2573,"versions":2574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2576},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[420],[2575],"0.9.0",[54],{"id":2578,"slug":2579,"identity":2580,"label":2581,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2582,"versions":2583,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2584},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[397],[2230],[54],{"id":2586,"slug":2587,"identity":2588,"label":2589,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2590,"versions":2591,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2593},"package:pypi:tzlocal","tzlocal-7dbb909c","pypi:tzlocal","tzlocal",[420],[2592],"5.2",[54],{"id":2595,"slug":2596,"identity":2597,"label":2598,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2599,"versions":2600,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2602},"package:pypi:unicodecsv","unicodecsv-c6739579","pypi:unicodecsv","unicodecsv",[468],[2601],"0.14.1",[54],{"id":2604,"slug":2605,"identity":2606,"label":2607,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2608,"versions":2609,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2611},"package:pypi:unstructured-client","unstructured-client-182f0adb","pypi:unstructured-client","unstructured-client",[420],[2610],"0.28.1",[54],{"id":2613,"slug":2614,"identity":2615,"label":2616,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2617,"versions":2618,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2620},"package:pypi:unstructured-inference","unstructured-inference-293d0374","pypi:unstructured-inference","unstructured-inference",[397],[2619],"0.8.1",[54],{"id":2622,"slug":2623,"identity":2624,"label":2625,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2626,"versions":2627,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2629},"package:pypi:unstructured-pytesseract","unstructured-pytesseract-f5c4acd3","pypi:unstructured-pytesseract","unstructured-pytesseract",[397],[2628],"0.3.13",[54],{"id":2631,"slug":2632,"identity":2633,"label":2634,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2635,"versions":2636,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2638},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[409],[2637],"0.22.0",[54],{"id":2640,"slug":2641,"identity":2642,"label":2643,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2644,"versions":2645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2646},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[420],[479],[54],{"id":2648,"slug":2649,"identity":2650,"label":2651,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2652,"versions":2653,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2655},"package:pypi:wand","wand-19b125a5","pypi:wand","wand",[420],[2654],"0.6.13",[54],{"id":2657,"slug":2658,"identity":2659,"label":2660,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2661,"versions":2662,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2664},"package:pypi:wasabi","wasabi-568fa465","pypi:wasabi","wasabi",[420],[2663],"1.1.3",[54],{"id":2666,"slug":2667,"identity":2668,"label":2669,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2670,"versions":2671,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2673},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[420],[2672],"1.0.3",[54],{"id":2675,"slug":2676,"identity":2677,"label":2678,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2679,"versions":2680,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2682},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[420],[2681],"0.2.13",[54],{"id":2684,"slug":2685,"identity":2686,"label":2687,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2688,"versions":2689,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2690},"package:pypi:weasel","weasel-b884b5dc","pypi:weasel","weasel",[420],[1286],[54],{"id":2692,"slug":2693,"identity":2694,"label":2695,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2696,"versions":2697,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2699},"package:pypi:webencodings","webencodings-04815c4d","pypi:webencodings","webencodings",[468],[2698],"0.5.1",[54],{"id":2701,"slug":2702,"identity":2703,"label":2704,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2705,"versions":2706,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2708},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[409],[2707],"14.1",[54],{"id":2710,"slug":2711,"identity":2712,"label":2713,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2714,"versions":2715,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2717},"package:pypi:widgetsnbextension","widgetsnbextension-8ee19027","pypi:widgetsnbextension","widgetsnbextension",[409],[2716],"4.0.13",[54],{"id":2719,"slug":2720,"identity":2721,"label":2722,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2723,"versions":2724,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2725},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[468],[587],[54],{"id":2727,"slug":2728,"identity":2729,"label":2730,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2731,"versions":2732,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2733},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[634,468],[1663],[54],{"id":2735,"slug":2736,"identity":2737,"label":2738,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2739,"versions":2740,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2742},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[397],[2741],"1.18.3",[54],{"id":2744,"slug":2745,"identity":2746,"label":2747,"aiRelevant":45,"provider":406,"advisoryCount":37,"licenseExpressions":2748,"versions":2749,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2751},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[420],[2750],"3.21.0",[54],[2753,2791,2826,2858,2891,2921,2953,2980,3006,3031,3057,3088,3115,3158,3184,3210,3239,3267,3299,3322,3351,3378,3412,3448,3474,3501,3521,3553,3571,3601,3634,3660,3689,3713,3747,3785,3811,3834,3857,3879,3904,3929,3956,3984,4007,4039,4064,4092,4118,4154,4177,4200,4227,4249,4279,4306,4325,4379,4419,4445,4469,4492,4519,4534,4556,4579,4601,4624,4650,4673,4699,4726,4751,4782,4811,4839,4864,4895,4934,4961,4990,5019,5037,5058,5093,5143,5169,5208,5231,5263,5286,5311,5335,5358,5381,5408,5442,5468,5495,5521,5551,5571,5594,5619,5651,5679,5703,5756,5781,5803,5835,5875,5905,5929,5961,5988,6022,6048,6073,6094,6132,6158,6182,6205,6233,6257,6285,6308,6334,6353,6381,6414,6439,6466,6491,6519,6542,6565,6592,6620,6654,6669,6702,6729,6751,6773,6794,6826,6846,6873,6898,6925,6960,6990,7023,7047,7074,7105,7127,7150,7178,7200,7227,7252,7281,7300,7321,7342,7388,7413,7439,7462,7490,7513,7537,7556,7578,7600,7630,7658,7679,7702,7727,7750,7798,7820,7841,7861,7890,7916,7938,7965,7990,8014,8035,8059,8083,8098,8124,8146,8172,8187,8206,8242,8268,8300,8325,8352,8389,8410,8437,8490,8518,8545,8559,8589,8621,8647,8668,8691,8719,8747,8774,8800,8826,8852,8875,8895,8925,8950,8979,9007,9033,9085,9110,9133,9159,9191,9225,9250,9275,9307,9326,9353,9372,9392,9420,9441,9462,9487,9509,9525,9545,9562,9581,9598,9619,9635,9650,9667,9682,9699,9716,9733,9746,9759,9772,9785,9798,9811,9824,9837,9859,9872,9903,9932,9945],{"id":103,"slug":2754,"dossier":45,"summary":2755,"aliases":2756,"sourceIds":2759,"published":2760,"modified":2761,"checkedAt":7,"severity":2762,"references":2769,"versionKeys":2789,"packageCount":32,"repositoryCount":32},"ghsa-248m-82v9-q6g6-26728681","pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams",[2757,2758],"CVE-2026-48156","PYSEC-2026-3004",[103,2758],"2026-06-12T18:29:59Z","2026-07-13T16:43:52.833287270Z",[2763,2766],{"type":2764,"score":2765},"CVSS_V3","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2767,"score":2768},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2770,2773,2776,2778,2780,2783,2785,2787],{"type":2771,"url":2772},"WEB","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",{"type":2774,"url":2775},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48156",{"type":2771,"url":2777},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3791",{"type":2771,"url":2779},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F507d7c9aa6ea83389b954b9c3c0c528fe5d5da70",{"type":2781,"url":2782},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf",{"type":2771,"url":2784},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.0",{"type":2781,"url":2786},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf",{"type":2774,"url":2788},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248m-82v9-q6g6",[2790],"pypi:pypdf@5.1.0",{"id":104,"slug":2792,"dossier":45,"summary":2793,"aliases":2794,"sourceIds":2797,"published":2798,"modified":2799,"checkedAt":7,"severity":2800,"references":2803,"versionKeys":2824,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2795,2796],"CVE-2024-39689","PYSEC-2024-230",[104,2796],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2801],{"type":2764,"score":2802},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2804,2806,2808,2811,2813,2815,2818,2820,2822],{"type":2774,"url":2805},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2774,"url":2807},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2809,"url":2810},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2781,"url":2812},"https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2771,"url":2814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2816,"url":2817},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2771,"url":2819},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2774,"url":2821},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2774,"url":2823},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2825],"pypi:certifi@2024.6.2",{"id":105,"slug":2827,"dossier":45,"summary":2828,"aliases":2829,"sourceIds":2832,"published":2833,"modified":2834,"checkedAt":7,"severity":2835,"references":2838,"versionKeys":2850,"packageCount":32,"repositoryCount":594},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2830,2831],"CVE-2026-4372","PYSEC-2026-2289",[105,2831],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2836],{"type":2764,"score":2837},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2839,2841,2843,2845,2848],{"type":2774,"url":2840},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2809,"url":2842},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2781,"url":2844},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2846,"url":2847},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2774,"url":2849},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2851,2852,2853,2854,2855,2856,2857],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":106,"slug":2859,"dossier":45,"summary":2860,"aliases":2861,"sourceIds":2864,"published":2865,"modified":2866,"checkedAt":7,"severity":2867,"references":2870,"versionKeys":2887,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2862,2863],"CVE-2025-54121","PYSEC-2026-1941",[106,2863],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2868],{"type":2764,"score":2869},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2871,2873,2875,2877,2879,2881,2883,2885],{"type":2771,"url":2872},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2774,"url":2874},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2809,"url":2876},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2781,"url":2878},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2771,"url":2880},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2771,"url":2882},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2781,"url":2884},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2774,"url":2886},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2888,2889,2890],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":107,"slug":2892,"dossier":45,"summary":2893,"aliases":2894,"sourceIds":2897,"published":2898,"modified":2899,"checkedAt":7,"severity":2900,"references":2905,"versionKeys":2912,"packageCount":32,"repositoryCount":574},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2895,2896],"CVE-2026-54279","PYSEC-2026-2112",[107,2896],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2901,2903],{"type":2767,"score":2902},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":2904},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2906,2908,2910],{"type":2774,"url":2907},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2781,"url":2909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2809,"url":2911},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2913,2914,2915,2916,2917,2918,2919,2920],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":108,"slug":2922,"dossier":45,"summary":2923,"aliases":2924,"sourceIds":2927,"published":2928,"modified":2929,"checkedAt":7,"severity":2930,"references":2933,"versionKeys":2950,"packageCount":32,"repositoryCount":632},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2925,2926],"CVE-2026-44307","PYSEC-2026-2617",[108,2926],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2931],{"type":2767,"score":2932},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2934,2936,2938,2940,2942,2944,2946,2948],{"type":2771,"url":2935},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2774,"url":2937},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2771,"url":2939},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2771,"url":2941},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2781,"url":2943},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2771,"url":2945},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2781,"url":2947},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2774,"url":2949},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2951,2952],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":109,"slug":2954,"dossier":45,"summary":2955,"aliases":2956,"sourceIds":2959,"published":2960,"modified":2961,"checkedAt":7,"severity":2962,"references":2964,"versionKeys":2979,"packageCount":32,"repositoryCount":32},"ghsa-2q4j-m29v-hq73-b4b89bc3","pypdf has possible Infinite Loop when processing outlines\u002Fbookmarks",[2957,2958],"CVE-2026-24688","PYSEC-2026-1827",[109,2958],"2026-01-26T23:37:57Z","2026-07-07T17:56:12.815561375Z",[2963],{"type":2767,"score":2768},[2965,2967,2969,2971,2973,2974,2976,2977],{"type":2771,"url":2966},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",{"type":2774,"url":2968},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24688",{"type":2771,"url":2970},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3610",{"type":2771,"url":2972},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb1282f8dcdc1a7b41ceab6740ffddfdf31b1fec1",{"type":2781,"url":2782},{"type":2771,"url":2975},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.2",{"type":2781,"url":2786},{"type":2774,"url":2978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2q4j-m29v-hq73",[2790],{"id":110,"slug":2981,"dossier":45,"summary":2982,"aliases":2983,"sourceIds":2986,"published":2987,"modified":2988,"checkedAt":7,"severity":2989,"references":2992,"versionKeys":3005,"packageCount":32,"repositoryCount":32},"ghsa-2rw7-x74f-jg35-d822b126","pypdf has a possible infinite loop when loading circular \u002FPrev entries in cross-reference streams",[2984,2985],"CVE-2026-27628","PYSEC-2026-3005",[110,2985],"2026-02-25T16:09:03Z","2026-07-13T16:42:58.625591114Z",[2990],{"type":2767,"score":2991},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2993,2995,2997,2999,3001,3002,3003],{"type":2771,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",{"type":2774,"url":2996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27628",{"type":2771,"url":2998},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3654",{"type":2771,"url":3000},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff0a462d36971cf077d74492a348d0d06fd60ea4d",{"type":2781,"url":2782},{"type":2781,"url":2786},{"type":2774,"url":3004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2rw7-x74f-jg35",[2790],{"id":111,"slug":3007,"dossier":45,"summary":3008,"aliases":3009,"sourceIds":3012,"published":3013,"modified":3014,"checkedAt":7,"severity":3015,"references":3020,"versionKeys":3030,"packageCount":32,"repositoryCount":574},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[3010,3011],"CVE-2026-34514","PYSEC-2026-2096",[111,3011],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[3016,3018],{"type":2767,"score":3017},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":3019},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3021,3023,3025,3027,3028],{"type":2809,"url":3022},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2774,"url":3024},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2809,"url":3026},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2781,"url":2909},{"type":2774,"url":3029},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2913,2914,2915,2916,2917,2918,2919,2920],{"id":112,"slug":3032,"dossier":45,"summary":3033,"aliases":3034,"sourceIds":3037,"published":3038,"modified":3039,"checkedAt":7,"severity":3040,"references":3042,"versionKeys":3053,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[3035,3036],"CVE-2026-49476","PYSEC-2026-3071",[112,3036],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[3041],{"type":2764,"score":2904},[3043,3045,3047,3049,3051],{"type":2771,"url":3044},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2781,"url":3046},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":2781,"url":3048},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":2774,"url":3050},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":2774,"url":3052},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[3054,3055,3056],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":113,"slug":3058,"dossier":89,"summary":3059,"aliases":3060,"sourceIds":3063,"published":3064,"modified":3065,"checkedAt":7,"severity":3066,"references":3069,"versionKeys":3082,"packageCount":32,"repositoryCount":101},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[3061,3062],"CVE-2025-66471","PYSEC-2026-1994",[113,3062],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[3067],{"type":2767,"score":3068},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[3070,3072,3074,3076,3078,3080],{"type":2771,"url":3071},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2774,"url":3073},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2809,"url":3075},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2781,"url":3077},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2781,"url":3079},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2774,"url":3081},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[3083,3084,3085,3086,3087],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":114,"slug":3089,"dossier":45,"summary":3090,"aliases":3091,"sourceIds":3094,"published":3095,"modified":3096,"checkedAt":7,"severity":3097,"references":3100,"versionKeys":3113,"packageCount":32,"repositoryCount":682},"ghsa-33p9-3p43-82vq-f6a57ddd","Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability",[3092,3093],"CVE-2025-30167","PYSEC-2026-1477",[114,3093],"2025-06-04T21:00:23Z","2026-07-07T17:57:34.145908633Z",[3098],{"type":2764,"score":3099},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3101,3103,3105,3107,3109,3111],{"type":2771,"url":3102},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fsecurity\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",{"type":2774,"url":3104},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30167",{"type":2771,"url":3106},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core\u002Fcommit\u002F5e8965600adda6b416692ce7e85ecb2bd814bd52",{"type":2781,"url":3108},"https:\u002F\u002Fgithub.com\u002Fjupyter\u002Fjupyter_core",{"type":2781,"url":3110},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjupyter-core",{"type":2774,"url":3112},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-33p9-3p43-82vq",[3114],"pypi:jupyter-core@5.7.2",{"id":115,"slug":3116,"dossier":45,"summary":3117,"aliases":3118,"sourceIds":3122,"published":3123,"modified":3124,"checkedAt":7,"severity":3125,"references":3132,"versionKeys":3154,"packageCount":32,"repositoryCount":663},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[3119,3120,3121],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[115,3121],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[3126,3128,3130],{"type":2764,"score":3127},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2767,"score":3129},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2764,"score":3131},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3133,3135,3138,3140,3142,3144,3146,3148,3150,3152],{"type":2774,"url":3134},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":3136,"url":3137},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":3136,"url":3139},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2771,"url":3141},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2781,"url":3143},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2771,"url":3145},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":3136,"url":3147},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2774,"url":3149},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2774,"url":3151},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2774,"url":3153},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[3155,3156,3157],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":116,"slug":3159,"dossier":45,"summary":3160,"aliases":3161,"sourceIds":3164,"published":3165,"modified":3166,"checkedAt":7,"severity":3167,"references":3169,"versionKeys":3183,"packageCount":32,"repositoryCount":682},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[3162,3163],"CVE-2025-3933","PYSEC-2026-1977",[116,3163],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[3168],{"type":2764,"score":2869},[3170,3172,3174,3176,3177,3179,3181],{"type":2774,"url":3171},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2771,"url":3173},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2771,"url":3175},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2781,"url":2844},{"type":2771,"url":3178},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2781,"url":3180},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2774,"url":3182},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2851,2852],{"id":117,"slug":3185,"dossier":89,"summary":3186,"aliases":3187,"sourceIds":3190,"published":3191,"modified":3192,"checkedAt":7,"severity":3193,"references":3196,"versionKeys":3209,"packageCount":32,"repositoryCount":101},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[3188,3189],"CVE-2026-21441","PYSEC-2026-1996",[117,3189],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[3194,3195],{"type":2764,"score":2904},{"type":2767,"score":3068},[3197,3199,3201,3203,3204,3206,3207],{"type":2771,"url":3198},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2774,"url":3200},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2809,"url":3202},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2781,"url":3077},{"type":2771,"url":3205},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2781,"url":3079},{"type":2774,"url":3208},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[3083,3084,3085,3086,3087],{"id":118,"slug":3211,"dossier":45,"summary":3212,"aliases":3213,"sourceIds":3216,"published":3217,"modified":3218,"checkedAt":7,"severity":3219,"references":3223,"versionKeys":3238,"packageCount":32,"repositoryCount":32},"ghsa-3crg-w4f6-42mx-48ac41a9","pypdf: Manipulated XMP metadata entity declarations can exhaust RAM",[3214,3215],"CVE-2026-40260","PYSEC-2026-3006",[118,3215],"2026-04-10T20:59:36Z","2026-07-13T16:42:24.793622978Z",[3220,3221],{"type":2764,"score":2869},{"type":2767,"score":3222},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3224,3226,3228,3230,3232,3233,3235,3236],{"type":2771,"url":3225},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",{"type":2774,"url":3227},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40260",{"type":2771,"url":3229},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3724",{"type":2771,"url":3231},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb15a374e5ca648d4878e57c3b2c0551e7f8cc7f8",{"type":2781,"url":2782},{"type":2771,"url":3234},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.0",{"type":2781,"url":2786},{"type":2774,"url":3237},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3crg-w4f6-42mx",[2790],{"id":119,"slug":3240,"dossier":45,"summary":3241,"aliases":3242,"sourceIds":3245,"published":3246,"modified":3247,"checkedAt":7,"severity":3248,"references":3251,"versionKeys":3264,"packageCount":32,"repositoryCount":632},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[3243,3244],"CVE-2026-54911","PYSEC-2026-2294",[119,3244],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[3249],{"type":2764,"score":3250},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3252,3254,3256,3258,3260,3262],{"type":2809,"url":3253},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2774,"url":3255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2809,"url":3257},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2771,"url":3259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2781,"url":3261},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2774,"url":3263},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[3265,3266],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":120,"slug":3268,"dossier":45,"summary":3269,"aliases":3270,"sourceIds":3273,"published":3274,"modified":3275,"checkedAt":7,"severity":3276,"references":3280,"versionKeys":3297,"packageCount":32,"repositoryCount":32},"ghsa-3r9x-f23j-gc73-540cef2a","onnx Vulnerable to Path Traversal via Symlink",[3271,3272],"CVE-2026-27489","PYSEC-2026-2239",[120,3272],"2026-03-31T22:34:25Z","2026-07-13T07:26:40.732136112Z",[3277,3278],{"type":2767,"score":2932},{"type":2764,"score":3279},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3281,3283,3285,3287,3289,3291,3293,3295],{"type":2809,"url":3282},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-3r9x-f23j-gc73",{"type":2774,"url":3284},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27489",{"type":2809,"url":3286},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002F4755f8053928dce18a61db8fec71b69c74f786cb",{"type":2781,"url":3288},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx",{"type":2771,"url":3290},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27489",{"type":2771,"url":3292},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27489.json",{"type":2774,"url":3294},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":3136,"url":3296},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453929",[3298],"pypi:onnx@1.17.0",{"id":121,"slug":3300,"dossier":45,"summary":3301,"aliases":3302,"sourceIds":3305,"published":3306,"modified":3307,"checkedAt":7,"severity":3308,"references":3312,"versionKeys":3321,"packageCount":32,"repositoryCount":574},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[3303,3304],"CVE-2026-34517","PYSEC-2026-2099",[121,3304],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[3309,3311],{"type":2767,"score":3310},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":2869},[3313,3315,3317,3319,3320],{"type":2809,"url":3314},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2774,"url":3316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2809,"url":3318},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":122,"slug":3323,"dossier":45,"summary":3324,"aliases":3325,"sourceIds":3328,"published":3329,"modified":3330,"checkedAt":7,"severity":3331,"references":3334,"versionKeys":3345,"packageCount":32,"repositoryCount":64},"ghsa-3x9g-8vmp-wqvf-6d03bf5f","Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient",[3326,3327],"CVE-2026-49853","PYSEC-2026-3387",[122,3327],"2026-06-15T20:20:00Z","2026-07-13T16:42:55.378655356Z",[3332],{"type":2764,"score":3333},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[3335,3337,3339,3341,3343],{"type":2771,"url":3336},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2781,"url":3338},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado",{"type":2781,"url":3340},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftornado",{"type":2774,"url":3342},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3x9g-8vmp-wqvf",{"type":2774,"url":3344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49853",[3346,3347,3348,3349,3350],"pypi:tornado@6.4.2","pypi:tornado@6.5.1","pypi:tornado@6.5.2","pypi:tornado@6.5.4","pypi:tornado@6.5.5",{"id":123,"slug":3352,"dossier":45,"summary":3353,"aliases":3354,"sourceIds":3357,"published":3358,"modified":3359,"checkedAt":7,"severity":3360,"references":3362,"versionKeys":3375,"packageCount":32,"repositoryCount":682},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[3355,3356],"CVE-2025-68480","PYSEC-2026-1605",[123,3356],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[3361],{"type":2764,"score":2869},[3363,3365,3367,3369,3371,3373],{"type":2771,"url":3364},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":2774,"url":3366},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":2771,"url":3368},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":2781,"url":3370},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":2781,"url":3372},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":2774,"url":3374},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[3376,3377],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":124,"slug":3379,"dossier":89,"summary":3380,"aliases":3381,"sourceIds":3385,"published":3386,"modified":3387,"checkedAt":7,"severity":3388,"references":3390,"versionKeys":3403,"packageCount":32,"repositoryCount":101},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[3382,3383,3384],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[124,3384],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[3389],{"type":2764,"score":2904},[3391,3393,3395,3397,3399,3401],{"type":2846,"url":3392},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2774,"url":3394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2809,"url":3396},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2771,"url":3398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2781,"url":3400},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2774,"url":3402},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[3404,3405,3406,3407,3408,3409,3410,3411],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":125,"slug":3413,"dossier":45,"summary":3414,"aliases":3415,"sourceIds":3418,"published":3419,"modified":3420,"checkedAt":7,"severity":3421,"references":3424,"versionKeys":3445,"packageCount":32,"repositoryCount":663},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[3416,3417],"CVE-2026-33236","PYSEC-2026-2237",[125,3417],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[3422],{"type":2764,"score":3423},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3425,3427,3429,3431,3433,3435,3437,3439,3441,3443],{"type":2846,"url":3426},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":2774,"url":3428},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":2809,"url":3430},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":2781,"url":3432},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":2771,"url":3434},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":2771,"url":3436},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":2774,"url":3438},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2774,"url":3440},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":2774,"url":3442},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":3136,"url":3444},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[3446,3447],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":126,"slug":3449,"dossier":45,"summary":3450,"aliases":3451,"sourceIds":3454,"published":3455,"modified":3456,"checkedAt":7,"severity":3457,"references":3460,"versionKeys":3473,"packageCount":32,"repositoryCount":613},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[3452,3453],"CVE-2025-50182","PYSEC-2026-1997",[126,3453],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[3458],{"type":2764,"score":3459},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3461,3463,3465,3467,3468,3470,3471],{"type":2771,"url":3462},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2774,"url":3464},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2809,"url":3466},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2781,"url":3077},{"type":2771,"url":3469},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2781,"url":3079},{"type":2774,"url":3472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[3083,3084,3085,3086],{"id":127,"slug":3475,"dossier":45,"summary":3476,"aliases":3477,"sourceIds":3480,"published":3481,"modified":3482,"checkedAt":7,"severity":3483,"references":3485,"versionKeys":3500,"packageCount":32,"repositoryCount":32},"ghsa-4f6g-68pf-7vhv-c3002af6","pypdf has possible long runtimes for malformed startxref",[3478,3479],"CVE-2026-22691","PYSEC-2026-1828",[127,3479],"2026-01-09T19:48:57Z","2026-07-07T17:56:05.491150444Z",[3484],{"type":2767,"score":3310},[3486,3488,3490,3492,3494,3495,3497,3498],{"type":2771,"url":3487},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",{"type":2774,"url":3489},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22691",{"type":2771,"url":3491},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3594",{"type":2771,"url":3493},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F294165726b646bb7799be1cc787f593f2fdbcf45",{"type":2781,"url":2782},{"type":2771,"url":3496},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.6.0",{"type":2781,"url":2786},{"type":2774,"url":3499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f6g-68pf-7vhv",[2790],{"id":128,"slug":3502,"dossier":45,"summary":3503,"aliases":3504,"sourceIds":3507,"published":3508,"modified":3509,"checkedAt":7,"severity":3510,"references":3514,"versionKeys":3520,"packageCount":32,"repositoryCount":574},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[3505,3506],"CVE-2026-54273","PYSEC-2026-2107",[128,3506],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[3511,3513],{"type":2767,"score":3512},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":2904},[3515,3517,3519],{"type":2774,"url":3516},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2809,"url":3518},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":129,"slug":3522,"dossier":45,"summary":3523,"aliases":3524,"sourceIds":3527,"published":3528,"modified":3529,"checkedAt":7,"severity":3530,"references":3533,"versionKeys":3548,"packageCount":32,"repositoryCount":34},"ghsa-4g5m-c9r5-49xf-40cc28b0","LiteLLM: Local file read via request-supplied OIDC file references",[3525,3526],"CVE-2026-59819","PYSEC-2026-3476",[129,3526],"2026-07-22T22:38:04Z","2026-07-23T15:11:50.258485894Z",[3531],{"type":2767,"score":3532},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3534,3536,3538,3540,3542,3544,3546],{"type":2771,"url":3535},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",{"type":2774,"url":3537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59819",{"type":2771,"url":3539},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25592",{"type":2781,"url":3541},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2771,"url":3543},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2781,"url":3545},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2774,"url":3547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",[3549,3550,3551,3552],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":130,"slug":3554,"dossier":45,"summary":3555,"aliases":3556,"sourceIds":3559,"published":3560,"modified":3561,"checkedAt":7,"severity":3562,"references":3566,"versionKeys":3570,"packageCount":32,"repositoryCount":574},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[3557,3558],"CVE-2026-54275","PYSEC-2026-237",[130,3558],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[3563,3565],{"type":2767,"score":3564},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":2904},[3567,3569],{"type":2774,"url":3568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":131,"slug":3572,"dossier":45,"summary":3573,"aliases":3574,"sourceIds":3577,"published":3578,"modified":3579,"checkedAt":7,"severity":3580,"references":3585,"versionKeys":3600,"packageCount":32,"repositoryCount":32},"ghsa-4pxv-j86v-mhcw-e5838cfe","pypdf: Possible long runtimes for wrong size values in incremental mode",[3575,3576],"CVE-2026-41313","PYSEC-2026-3007",[131,3576],"2026-04-16T21:30:12Z","2026-07-13T16:43:42.160859361Z",[3581,3583],{"type":2764,"score":3582},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":2767,"score":3584},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3586,3588,3590,3592,3594,3595,3597,3598],{"type":2771,"url":3587},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",{"type":2774,"url":3589},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41313",{"type":2771,"url":3591},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3735",{"type":2771,"url":3593},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc50a0104cf083356f7c7f5d61410466a57f5c88a",{"type":2781,"url":2782},{"type":2771,"url":3596},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.2",{"type":2781,"url":2786},{"type":2774,"url":3599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4pxv-j86v-mhcw",[2790],{"id":132,"slug":3602,"dossier":45,"summary":3603,"aliases":3604,"sourceIds":3608,"published":3609,"modified":3610,"checkedAt":7,"severity":3611,"references":3614,"versionKeys":3632,"packageCount":32,"repositoryCount":32},"ghsa-4vvm-4w3v-6mr8-41f51ef4","pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character",[3605,3606,3607],"CVE-2023-36464","PYSEC-2026-1835","PYSEC-2026-3008",[132,3606],"2023-06-30T20:33:57Z","2026-07-13T16:42:55.319975462Z",[3612],{"type":2764,"score":3613},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[3615,3617,3619,3621,3623,3625,3626,3628,3630],{"type":2771,"url":3616},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",{"type":2774,"url":3618},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-36464",{"type":2771,"url":3620},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F1828",{"type":2771,"url":3622},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F969",{"type":2809,"url":3624},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb0e5c689df689ab173df84dacd77b6fc3c161932",{"type":2781,"url":2782},{"type":2771,"url":3627},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F3.9.0",{"type":2781,"url":3629},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpypdf2",{"type":2774,"url":3631},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4vvm-4w3v-6mr8",[3633],"pypi:pypdf2@3.0.1",{"id":133,"slug":3635,"dossier":45,"summary":3636,"aliases":3637,"sourceIds":3640,"published":3641,"modified":3642,"checkedAt":7,"severity":3643,"references":3646,"versionKeys":3659,"packageCount":32,"repositoryCount":682},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[3638,3639],"CVE-2025-6921","PYSEC-2026-1980",[133,3639],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[3644],{"type":2764,"score":3645},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3647,3649,3651,3653,3654,3656,3657],{"type":2774,"url":3648},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2771,"url":3650},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2771,"url":3652},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2781,"url":2844},{"type":2771,"url":3655},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2781,"url":3180},{"type":2774,"url":3658},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2851,2852],{"id":134,"slug":3661,"dossier":89,"summary":3662,"aliases":3663,"sourceIds":3667,"published":3668,"modified":3669,"checkedAt":7,"severity":3670,"references":3673,"versionKeys":3688,"packageCount":32,"repositoryCount":101},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[3664,3665,3666],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[134,3666],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[3671],{"type":2764,"score":3672},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3674,3676,3678,3680,3682,3684,3686,3687],{"type":2846,"url":3675},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2774,"url":3677},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2809,"url":3679},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2809,"url":3681},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2809,"url":3683},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2771,"url":3685},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2781,"url":3400},{"type":2774,"url":3402},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":135,"slug":3690,"dossier":45,"summary":3691,"aliases":3692,"sourceIds":3695,"published":3696,"modified":3697,"checkedAt":7,"severity":3698,"references":3700,"versionKeys":3712,"packageCount":32,"repositoryCount":32},"ghsa-4xc4-762w-m6cg-fd09c73f","pypdf has possible long runtimes for missing \u002FRoot object with large \u002FSize values",[3693,3694],"CVE-2026-22690","PYSEC-2026-1829",[135,3694],"2026-01-09T19:48:22Z","2026-07-07T17:56:40.246085806Z",[3699],{"type":2767,"score":3310},[3701,3703,3705,3706,3707,3708,3709,3710],{"type":2771,"url":3702},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",{"type":2774,"url":3704},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22690",{"type":2771,"url":3491},{"type":2771,"url":3493},{"type":2781,"url":2782},{"type":2771,"url":3496},{"type":2781,"url":2786},{"type":2774,"url":3711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xc4-762w-m6cg",[2790],{"id":136,"slug":3714,"dossier":45,"summary":3715,"aliases":3716,"sourceIds":3719,"published":3720,"modified":3721,"checkedAt":7,"severity":3722,"references":3727,"versionKeys":3746,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[3717,3718],"CVE-2026-49468","PYSEC-2026-388",[136,3718],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[3723,3725],{"type":2764,"score":3724},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2767,"score":3726},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[3728,3730,3732,3734,3736,3737,3739,3741,3743,3744],{"type":2771,"url":3729},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2774,"url":3731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2771,"url":3733},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2771,"url":3735},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2781,"url":3541},{"type":2771,"url":3738},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2774,"url":3740},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2771,"url":3742},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2781,"url":3545},{"type":2771,"url":3745},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[3549,3550,3551,3552],{"id":137,"slug":3748,"dossier":89,"summary":3749,"aliases":3750,"sourceIds":3753,"published":3754,"modified":3755,"checkedAt":7,"severity":3756,"references":3759,"versionKeys":3782,"packageCount":32,"repositoryCount":101},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3751,3752],"CVE-2026-4539","PYSEC-2026-2987",[137,3752],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3757,3758],{"type":2764,"score":3127},{"type":2767,"score":3129},[3760,3762,3764,3766,3768,3770,3772,3774,3776,3778,3780],{"type":2774,"url":3761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2771,"url":3763},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2771,"url":3765},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2771,"url":3767},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2781,"url":3769},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2771,"url":3771},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2771,"url":3773},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2771,"url":3775},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2771,"url":3777},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2781,"url":3779},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2774,"url":3781},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3783,3784],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":138,"slug":3786,"dossier":45,"summary":3787,"aliases":3788,"sourceIds":3791,"published":3792,"modified":3793,"checkedAt":7,"severity":3794,"references":3797,"versionKeys":3810,"packageCount":32,"repositoryCount":32},"ghsa-52x6-gq3r-vpf4-d634019a","pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction",[3789,3790],"CVE-2026-54530","PYSEC-2026-3009",[138,3790],"2026-06-16T14:05:40Z","2026-07-13T16:43:09.668829202Z",[3795],{"type":2767,"score":3796},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3798,3800,3802,3803,3805,3806,3808],{"type":2771,"url":3799},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":2771,"url":3801},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3830",{"type":2781,"url":2782},{"type":2771,"url":3804},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.0",{"type":2781,"url":2786},{"type":2774,"url":3807},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-52x6-gq3r-vpf4",{"type":2774,"url":3809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54530",[2790],{"id":139,"slug":3812,"dossier":45,"summary":3813,"aliases":3814,"sourceIds":3815,"published":3816,"modified":3817,"checkedAt":7,"severity":3818,"references":3820,"versionKeys":3827,"packageCount":32,"repositoryCount":613},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[139],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3819],{"type":2764,"score":2904},[3821,3823,3825],{"type":2771,"url":3822},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2781,"url":3824},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2771,"url":3826},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3828,3829,3830,3831,3832,3833],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":140,"slug":3835,"dossier":45,"summary":3836,"aliases":3837,"sourceIds":3840,"published":3841,"modified":3842,"checkedAt":7,"severity":3843,"references":3846,"versionKeys":3856,"packageCount":32,"repositoryCount":32},"ghsa-538c-55jv-c5g9-0ca5dbee","ONNX: Malicious ONNX models can crash servers by exploiting unprotected object settings.",[3838,3839],"CVE-2026-34445","PYSEC-2026-2240",[140,3839],"2026-04-01T18:16:30.500Z","2026-07-13T07:26:50.433584489Z",[3844],{"type":2764,"score":3845},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[3847,3849,3851,3853,3855],{"type":2809,"url":3848},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-538c-55jv-c5g9",{"type":2774,"url":3850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34445",{"type":2809,"url":3852},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7751",{"type":2809,"url":3854},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002Fe30c6935d67cc3eca2fa284e37248e7c0036c46b",{"type":2781,"url":3288},[3298],{"id":141,"slug":3858,"dossier":45,"summary":3859,"aliases":3860,"sourceIds":3863,"published":3864,"modified":3865,"checkedAt":7,"severity":3866,"references":3869,"versionKeys":3878,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[3861,3862],"CVE-2026-35029","PYSEC-2026-2597",[141,3862],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[3867],{"type":2767,"score":3868},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[3870,3872,3874,3875,3876],{"type":2771,"url":3871},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2774,"url":3873},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2781,"url":3541},{"type":2781,"url":3545},{"type":2774,"url":3877},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[3549,3550,3551,3552],{"id":142,"slug":3880,"dossier":45,"summary":3881,"aliases":3882,"sourceIds":3886,"published":3887,"modified":3888,"checkedAt":7,"severity":3889,"references":3893,"versionKeys":3903,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3883,3884,3885],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[142,3885],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3890,3892],{"type":2767,"score":3891},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2764,"score":3724},[3894,3896,3898,3900,3902],{"type":2774,"url":3895},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2774,"url":3897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2771,"url":3899},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2771,"url":3901},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2781,"url":3143},[3155],{"id":143,"slug":3905,"dossier":45,"summary":3906,"aliases":3907,"sourceIds":3910,"published":3911,"modified":3912,"checkedAt":7,"severity":3913,"references":3916,"versionKeys":3928,"packageCount":32,"repositoryCount":613},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3908,3909],"CVE-2025-69226","PYSEC-2026-1097",[143,3909],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3914],{"type":2767,"score":3915},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3917,3919,3921,3923,3924,3926],{"type":2771,"url":3918},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2774,"url":3920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2809,"url":3922},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2781,"url":2909},{"type":2781,"url":3925},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2774,"url":3927},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2913,2914,2915,2916,2917,2918,2919],{"id":144,"slug":3930,"dossier":45,"summary":3931,"aliases":3932,"sourceIds":3935,"published":3936,"modified":3937,"checkedAt":7,"severity":3938,"references":3940,"versionKeys":3955,"packageCount":32,"repositoryCount":32},"ghsa-55h5-xmcq-c37v-35177962","pypdf: Possible long runtimes for repeated malformed cross-reference entries",[3933,3934],"CVE-2026-59937","PYSEC-2026-3610",[144,3934],"2026-07-23T15:07:33Z","2026-08-04T14:40:43.949806417Z",[3939],{"type":2767,"score":3222},[3941,3943,3945,3947,3949,3950,3952,3953],{"type":2771,"url":3942},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",{"type":2774,"url":3944},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59937",{"type":2771,"url":3946},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3887",{"type":2771,"url":3948},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fb5fc5aa714f4b696fb9b1deaa35a9e4a4eb50dae",{"type":2781,"url":2782},{"type":2771,"url":3951},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.0",{"type":2781,"url":2786},{"type":2774,"url":3954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-55h5-xmcq-c37v",[2790],{"id":145,"slug":3957,"dossier":45,"summary":3958,"aliases":3959,"sourceIds":3962,"published":3963,"modified":3964,"checkedAt":7,"severity":3965,"references":3969,"versionKeys":3982,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3960,3961],"CVE-2024-53981","PYSEC-2026-1851",[145,3961],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3966,3967],{"type":2764,"score":2904},{"type":2767,"score":3968},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3970,3972,3974,3976,3978,3980],{"type":2771,"url":3971},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2774,"url":3973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2771,"url":3975},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2781,"url":3977},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2781,"url":3979},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2774,"url":3981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3983],"pypi:python-multipart@0.0.9",{"id":146,"slug":3985,"dossier":45,"summary":3986,"aliases":3987,"sourceIds":3990,"published":3991,"modified":3992,"checkedAt":7,"severity":3993,"references":3995,"versionKeys":4006,"packageCount":32,"repositoryCount":682},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3988,3989],"CVE-2025-6638","PYSEC-2026-1981",[146,3989],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3994],{"type":2764,"score":3645},[3996,3998,3999,4000,4001,4003,4004],{"type":2774,"url":3997},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2771,"url":3650},{"type":2771,"url":3652},{"type":2781,"url":2844},{"type":2771,"url":4002},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2781,"url":3180},{"type":2774,"url":4005},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2851,2852],{"id":147,"slug":4008,"dossier":45,"summary":4009,"aliases":4010,"sourceIds":4014,"published":4015,"modified":4016,"checkedAt":7,"severity":4017,"references":4022,"versionKeys":4037,"packageCount":32,"repositoryCount":32},"ghsa-5gjj-6r7v-ph3x-62997ad9","pillow-heif: Integer Overflow in Encode Path Buffer Validation Leads to Heap Out-of-Bounds Read",[4011,4012,4013],"CVE-2026-28231","PYSEC-2026-2248","PYSEC-2026-2258",[147,4012],"2026-02-27T20:21:40.697Z","2026-07-20T19:15:27.655329502Z",[4018,4020],{"type":2767,"score":4019},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2764,"score":4021},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4023,4025,4027,4029,4031,4033,4035],{"type":2846,"url":4024},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Fsecurity\u002Fadvisories\u002FGHSA-5gjj-6r7v-ph3x",{"type":2774,"url":4026},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28231",{"type":2809,"url":4028},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Fcommit\u002F8305a15d3780c533b762578cbe987d27a2c59c7a",{"type":2781,"url":4030},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif",{"type":2774,"url":4032},"https:\u002F\u002Fgithub.com\u002Fbigcat88\u002Fpillow_heif\u002Freleases\u002Ftag\u002Fv1.3.0",{"type":2771,"url":4034},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpi-heif\u002FPYSEC-2026-2248.yaml",{"type":2771,"url":4036},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow-heif\u002FPYSEC-2026-2258.yaml",[4038],"pypi:pi-heif@0.21.0",{"id":148,"slug":4040,"dossier":45,"summary":4041,"aliases":4042,"sourceIds":4045,"published":4046,"modified":4047,"checkedAt":7,"severity":4048,"references":4050,"versionKeys":4063,"packageCount":32,"repositoryCount":32},"ghsa-5hgr-hg42-57jg-7ca5115e","pypdf: Inefficient decoding of FlateDecode PNG predictor streams",[4043,4044],"CVE-2026-49460","PYSEC-2026-3010",[148,4044],"2026-06-16T13:46:42Z","2026-07-13T16:42:25.325556250Z",[4049],{"type":2767,"score":2768},[4051,4053,4055,4056,4058,4059,4061],{"type":2771,"url":4052},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":2771,"url":4054},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3806",{"type":2781,"url":2782},{"type":2771,"url":4057},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.2",{"type":2781,"url":2786},{"type":2774,"url":4060},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5hgr-hg42-57jg",{"type":2774,"url":4062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49460",[2790],{"id":149,"slug":4065,"dossier":45,"summary":4066,"aliases":4067,"sourceIds":4070,"published":4071,"modified":4072,"checkedAt":7,"severity":4073,"references":4076,"versionKeys":4091,"packageCount":32,"repositoryCount":34},"ghsa-5jmr-gcrj-2c9q-651d4e44","LiteLLM: Arbitrary file write via path traversal in Skills archive extraction",[4068,4069],"CVE-2026-59820","PYSEC-2026-3477",[149,4069],"2026-07-22T22:37:15Z","2026-07-23T15:11:39.917682016Z",[4074],{"type":2767,"score":4075},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4077,4079,4081,4083,4085,4086,4088,4089],{"type":2771,"url":4078},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",{"type":2774,"url":4080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59820",{"type":2771,"url":4082},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25475",{"type":2771,"url":4084},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F6a15adcd64137d37f73dee76dfe7481f8c2d9196",{"type":2781,"url":3541},{"type":2771,"url":4087},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.7-stable",{"type":2781,"url":3545},{"type":2774,"url":4090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",[3549,3550,3551,3552],{"id":150,"slug":4093,"dossier":45,"summary":4094,"aliases":4095,"sourceIds":4098,"published":4099,"modified":4100,"checkedAt":7,"severity":4101,"references":4103,"versionKeys":4117,"packageCount":32,"repositoryCount":32},"ghsa-5qjq-93h5-hrgp-c5495e01","pypdf: Possible large memory usage for wrong image dimensions",[4096,4097],"CVE-2026-59938","PYSEC-2026-3611",[150,4097],"2026-07-23T15:06:58Z","2026-08-04T14:41:04.368271781Z",[4102],{"type":2767,"score":3222},[4104,4106,4108,4110,4112,4113,4114,4115],{"type":2771,"url":4105},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",{"type":2774,"url":4107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59938",{"type":2771,"url":4109},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3888",{"type":2771,"url":4111},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fc64583be16b8e8763d8777075f8ecbf382014b7a",{"type":2781,"url":2782},{"type":2771,"url":3951},{"type":2781,"url":2786},{"type":2774,"url":4116},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5qjq-93h5-hrgp",[2790],{"id":151,"slug":4119,"dossier":45,"summary":4120,"aliases":4121,"sourceIds":4125,"published":4126,"modified":4127,"checkedAt":7,"severity":4128,"references":4133,"versionKeys":4150,"packageCount":32,"repositoryCount":663},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[4122,4123,4124],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[151,4124],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[4129,4131],{"type":2767,"score":4130},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2764,"score":4132},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4134,4136,4138,4140,4142,4144,4146,4148],{"type":2846,"url":4135},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2774,"url":4137},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":3136,"url":4139},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2809,"url":4141},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2771,"url":4143},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2781,"url":4145},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2771,"url":4147},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2816,"url":4149},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[4151,4152,4153],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":152,"slug":4155,"dossier":45,"summary":4156,"aliases":4157,"sourceIds":4160,"published":4161,"modified":4162,"checkedAt":7,"severity":4163,"references":4165,"versionKeys":4174,"packageCount":32,"repositoryCount":632},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[4158,4159],"CVE-2026-53539","PYSEC-2026-3036",[152,4159],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[4164],{"type":2764,"score":2904},[4166,4168,4169,4170,4172],{"type":2771,"url":4167},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2781,"url":3977},{"type":2781,"url":3979},{"type":2774,"url":4171},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2774,"url":4173},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[4175,4176,3983],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":153,"slug":4178,"dossier":89,"summary":4179,"aliases":4180,"sourceIds":4184,"published":4185,"modified":4186,"checkedAt":7,"severity":4187,"references":4189,"versionKeys":4199,"packageCount":32,"repositoryCount":101},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[4181,4182,4183],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[153,4183],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[4188],{"type":2764,"score":2904},[4190,4192,4194,4195,4197,4198],{"type":2846,"url":4191},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2774,"url":4193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2809,"url":3396},{"type":2771,"url":4196},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2781,"url":3400},{"type":2774,"url":3402},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":154,"slug":4201,"dossier":45,"summary":4202,"aliases":4203,"sourceIds":4206,"published":4207,"modified":4208,"checkedAt":7,"severity":4209,"references":4211,"versionKeys":4226,"packageCount":32,"repositoryCount":32},"ghsa-5xf7-4p34-54qr-f10a0476","pypdf: Possible infinite loop for not terminated inline images",[4204,4205],"CVE-2026-59936","PYSEC-2026-3612",[154,4205],"2026-07-23T16:36:41Z","2026-08-04T14:40:36.194125422Z",[4210],{"type":2767,"score":3968},[4212,4214,4216,4218,4220,4221,4223,4224],{"type":2771,"url":4213},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",{"type":2774,"url":4215},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59936",{"type":2771,"url":4217},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3891",{"type":2771,"url":4219},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fec3b14596186c40caca7cf8ab9b2155203e01b5b",{"type":2781,"url":2782},{"type":2771,"url":4222},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.1",{"type":2781,"url":2786},{"type":2774,"url":4225},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5xf7-4p34-54qr",[2790],{"id":155,"slug":4228,"dossier":45,"summary":4229,"aliases":4230,"sourceIds":4234,"published":4235,"modified":4236,"checkedAt":7,"severity":4237,"references":4240,"versionKeys":4248,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[4231,4232,4233],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[155,4233],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[4238,4239],{"type":2764,"score":3131},{"type":2767,"score":2768},[4241,4243,4245,4246],{"type":2774,"url":4242},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2774,"url":4244},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2781,"url":3400},{"type":2774,"url":4247},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[3407,3408,3409,3410,3411],{"id":156,"slug":4250,"dossier":89,"summary":4251,"aliases":4252,"sourceIds":4256,"published":4257,"modified":4258,"checkedAt":7,"severity":4259,"references":4262,"versionKeys":4278,"packageCount":32,"repositoryCount":101},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[4253,4254,4255],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[156,4255],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[4260],{"type":2767,"score":4261},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4263,4265,4267,4269,4271,4272,4274,4276],{"type":2771,"url":4264},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2774,"url":4266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2771,"url":4268},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2771,"url":4270},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2781,"url":3400},{"type":2771,"url":4273},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2781,"url":4275},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2774,"url":4277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":157,"slug":4280,"dossier":45,"summary":4281,"aliases":4282,"sourceIds":4285,"published":4286,"modified":4287,"checkedAt":7,"severity":4288,"references":4294,"versionKeys":4305,"packageCount":32,"repositoryCount":574},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[4283,4284],"CVE-2026-34520","PYSEC-2026-2102",[157,4284],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[4289,4291,4292],{"type":2764,"score":4290},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2767,"score":3017},{"type":2767,"score":4293},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4295,4297,4299,4301,4302,4303],{"type":2809,"url":4296},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2774,"url":4298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2809,"url":4300},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2781,"url":2909},{"type":2774,"url":3029},{"type":2771,"url":4304},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2913,2914,2915,2916,2917,2918,2919,2920],{"id":158,"slug":4307,"dossier":45,"summary":4308,"aliases":4309,"sourceIds":4312,"published":4313,"modified":4314,"checkedAt":7,"severity":4315,"references":4318,"versionKeys":4324,"packageCount":32,"repositoryCount":574},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[4310,4311],"CVE-2026-54277","PYSEC-2026-2110",[158,4311],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[4316,4317],{"type":2767,"score":3512},{"type":2764,"score":2904},[4319,4321,4323],{"type":2774,"url":4320},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2809,"url":4322},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":159,"slug":4326,"dossier":45,"summary":4327,"aliases":4328,"sourceIds":4331,"published":4332,"modified":4333,"checkedAt":7,"severity":4334,"references":4336,"versionKeys":4377,"packageCount":32,"repositoryCount":613},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[4329,4330],"CVE-2026-23490","PYSEC-2026-1810",[159,4330],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[4335],{"type":2764,"score":2904},[4337,4339,4341,4343,4345,4347,4349,4351,4353,4355,4357,4359,4361,4363,4365,4367,4369,4371,4373,4375],{"type":2771,"url":4338},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2774,"url":4340},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2771,"url":4342},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2771,"url":4344},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2771,"url":4346},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":2771,"url":4348},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":2771,"url":4350},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":2771,"url":4352},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":2771,"url":4354},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":2771,"url":4356},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":2771,"url":4358},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":2771,"url":4360},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":2771,"url":4362},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":2771,"url":4364},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":2771,"url":4366},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":2771,"url":4368},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":2781,"url":4370},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2771,"url":4372},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2771,"url":4374},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2771,"url":4376},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[4378],"pypi:pyasn1@0.6.1",{"id":160,"slug":4380,"dossier":45,"summary":4381,"aliases":4382,"sourceIds":4385,"published":4386,"modified":4387,"checkedAt":7,"severity":4388,"references":4392,"versionKeys":4417,"packageCount":32,"repositoryCount":32},"ghsa-6528-wvf6-f6qg-ecd99388","Pycrypto generates weak key parameters",[4383,4384],"CVE-2018-6594","PYSEC-2018-97",[160,4384],"2018-02-03T15:29:00Z","2024-10-18T22:22:56.958480Z",[4389,4391],{"type":2764,"score":4390},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2767,"score":2932},[4393,4395,4397,4399,4401,4403,4405,4407,4409,4411,4413,4415],{"type":2774,"url":4394},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2018-6594",{"type":3136,"url":4396},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fissues\u002F253",{"type":2771,"url":4398},"https:\u002F\u002Fgithub.com\u002FTElgamal\u002Fattack-on-pycrypto-elgamal",{"type":2774,"url":4400},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6528-wvf6-f6qg",{"type":2781,"url":4402},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto",{"type":2771,"url":4404},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycrypto\u002FPYSEC-2018-97.yaml",{"type":2771,"url":4406},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F02\u002Fmsg00018.html",{"type":2774,"url":4408},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202007-62",{"type":2771,"url":4410},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-1",{"type":2771,"url":4412},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-2",{"type":2771,"url":4414},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-1\u002F",{"type":2771,"url":4416},"https:\u002F\u002Fusn.ubuntu.com\u002F3616-2\u002F",[4418],"pypi:pycrypto@2.6.1",{"id":161,"slug":4420,"dossier":89,"summary":4421,"aliases":4422,"sourceIds":4425,"published":4426,"modified":4427,"checkedAt":7,"severity":4428,"references":4431,"versionKeys":4440,"packageCount":32,"repositoryCount":4444},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[4423,4424],"CVE-2026-45409","PYSEC-2026-215",[161,4424],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[4429,4430],{"type":2764,"score":2869},{"type":2767,"score":3222},[4432,4434,4436,4438],{"type":2774,"url":4433},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2774,"url":4435},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2781,"url":4437},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2771,"url":4439},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[4441,4442,4443],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":162,"slug":4446,"dossier":45,"summary":4447,"aliases":4448,"sourceIds":4451,"published":4452,"modified":4453,"checkedAt":7,"severity":4454,"references":4458,"versionKeys":4468,"packageCount":32,"repositoryCount":663},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[4449,4450],"CVE-2026-0847","PYSEC-2026-98",[162,4450],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[4455,4457],{"type":2764,"score":4456},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":2764,"score":3279},[4459,4461,4462,4464,4466],{"type":2774,"url":4460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":2781,"url":3432},{"type":2771,"url":4463},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":2846,"url":4465},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":2774,"url":4467},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[3446,3447],{"id":163,"slug":4470,"dossier":45,"summary":4471,"aliases":4472,"sourceIds":4475,"published":4476,"modified":4477,"checkedAt":7,"severity":4478,"references":4480,"versionKeys":4491,"packageCount":32,"repositoryCount":613},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[4473,4474],"CVE-2025-69224","PYSEC-2026-1099",[163,4474],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[4479],{"type":2767,"score":3017},[4481,4483,4485,4487,4488,4489],{"type":2771,"url":4482},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2774,"url":4484},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2809,"url":4486},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":4490},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2913,2914,2915,2916,2917,2918,2919],{"id":164,"slug":4493,"dossier":45,"summary":4494,"aliases":4495,"sourceIds":4498,"published":4499,"modified":4500,"checkedAt":7,"severity":4501,"references":4506,"versionKeys":4518,"packageCount":32,"repositoryCount":594},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[4496,4497],"CVE-2026-1839","PYSEC-2026-2288",[164,4497],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[4502,4504],{"type":2764,"score":4503},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2764,"score":4505},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4507,4509,4511,4512,4514,4516],{"type":2774,"url":4508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2809,"url":4510},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2781,"url":2844},{"type":2771,"url":4513},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2846,"url":4515},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2774,"url":4517},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2851,2852,2853,2854,2855,2856,2857],{"id":165,"slug":4520,"dossier":45,"summary":4521,"aliases":4522,"sourceIds":4523,"published":4524,"modified":4525,"checkedAt":7,"severity":4526,"references":4529,"versionKeys":4533,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[165],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[4527],{"type":2767,"score":4528},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4530,4532],{"type":2771,"url":4531},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2781,"url":3541},[3549,3550,3551,3552],{"id":166,"slug":4535,"dossier":45,"summary":4536,"aliases":4537,"sourceIds":4540,"published":4541,"modified":4542,"checkedAt":7,"severity":4543,"references":4545,"versionKeys":4555,"packageCount":32,"repositoryCount":663},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[4538,4539],"CVE-2026-12072","PYSEC-2026-3581",[166,4539],"2026-07-31T16:50:55Z","2026-08-06T15:11:53.284323541Z",[4544],{"type":2764,"score":3279},[4546,4548,4549,4551,4553],{"type":2771,"url":4547},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":2781,"url":3432},{"type":2781,"url":4550},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":2774,"url":4552},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":2774,"url":4554},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[3446,3447],{"id":167,"slug":4557,"dossier":45,"summary":4558,"aliases":4559,"sourceIds":4562,"published":4563,"modified":4564,"checkedAt":7,"severity":4565,"references":4567,"versionKeys":4578,"packageCount":32,"repositoryCount":613},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[4560,4561],"CVE-2025-69228","PYSEC-2026-1100",[167,4561],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[4566],{"type":2767,"score":3512},[4568,4570,4572,4574,4575,4576],{"type":2771,"url":4569},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2774,"url":4571},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2809,"url":4573},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":4577},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2913,2914,2915,2916,2917,2918,2919],{"id":168,"slug":4580,"dossier":45,"summary":4581,"aliases":4582,"sourceIds":4585,"published":4586,"modified":4587,"checkedAt":7,"severity":4588,"references":4591,"versionKeys":4600,"packageCount":32,"repositoryCount":632},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[4583,4584],"CVE-2026-53538","PYSEC-2026-3037",[168,4584],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[4589],{"type":2764,"score":4590},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[4592,4594,4595,4596,4598],{"type":2771,"url":4593},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2781,"url":3977},{"type":2781,"url":3979},{"type":2774,"url":4597},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2774,"url":4599},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[4175,4176,3983],{"id":169,"slug":4602,"dossier":45,"summary":4603,"aliases":4604,"sourceIds":4607,"published":4608,"modified":4609,"checkedAt":7,"severity":4610,"references":4612,"versionKeys":4623,"packageCount":32,"repositoryCount":613},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[4605,4606],"CVE-2025-69223","PYSEC-2026-1101",[169,4606],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[4611],{"type":2764,"score":2904},[4613,4615,4617,4619,4620,4621],{"type":2771,"url":4614},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2774,"url":4616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2809,"url":4618},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":4622},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2913,2914,2915,2916,2917,2918,2919],{"id":170,"slug":4625,"dossier":89,"summary":4626,"aliases":4627,"sourceIds":4631,"published":4632,"modified":4633,"checkedAt":7,"severity":4634,"references":4636,"versionKeys":4649,"packageCount":32,"repositoryCount":101},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[4628,4629,4630],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[170,4630],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[4635],{"type":2764,"score":2904},[4637,4639,4641,4643,4645,4647,4648],{"type":2846,"url":4638},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2774,"url":4640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2809,"url":4642},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2809,"url":4644},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2771,"url":4646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2781,"url":3400},{"type":2774,"url":4273},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":171,"slug":4651,"dossier":45,"summary":4652,"aliases":4653,"sourceIds":4656,"published":4657,"modified":4658,"checkedAt":7,"severity":4659,"references":4661,"versionKeys":4672,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4654,4655],"CVE-2024-12720","PYSEC-2026-1982",[171,4655],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[4660],{"type":2764,"score":3645},[4662,4664,4666,4667,4669,4670],{"type":2774,"url":4663},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2771,"url":4665},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2781,"url":2844},{"type":2771,"url":4668},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2781,"url":3180},{"type":2774,"url":4671},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2851],{"id":172,"slug":4674,"dossier":45,"summary":4675,"aliases":4676,"sourceIds":4679,"published":4680,"modified":4681,"checkedAt":7,"severity":4682,"references":4685,"versionKeys":4698,"packageCount":32,"repositoryCount":34},"ghsa-72m8-9m7m-h278-09927b5d","LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks",[4677,4678],"CVE-2026-59821","PYSEC-2026-3478",[172,4678],"2026-07-22T22:38:55Z","2026-07-23T15:11:26.912539142Z",[4683],{"type":2767,"score":4684},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4686,4688,4690,4692,4693,4695,4696],{"type":2771,"url":4687},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",{"type":2774,"url":4689},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59821",{"type":2771,"url":4691},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe50b4486d0f7aa0497185a1ebcdd2c91f1769eba",{"type":2781,"url":3541},{"type":2771,"url":4694},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.82.0-stable",{"type":2781,"url":3545},{"type":2774,"url":4697},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",[3549,3550,3551,3552],{"id":173,"slug":4700,"dossier":45,"summary":4701,"aliases":4702,"sourceIds":4705,"published":4706,"modified":4707,"checkedAt":7,"severity":4708,"references":4711,"versionKeys":4725,"packageCount":32,"repositoryCount":34},"ghsa-7488-6r32-c95q-deb7c5f3","LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback",[4703,4704],"CVE-2026-59822","PYSEC-2026-3479",[173,4704],"2026-07-22T22:38:33Z","2026-07-23T15:11:29.132983365Z",[4709],{"type":2767,"score":4710},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4712,4714,4716,4718,4720,4721,4722,4723],{"type":2771,"url":4713},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-7488-6r32-c95q",{"type":2774,"url":4715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59822",{"type":2771,"url":4717},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F26463",{"type":2771,"url":4719},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F73869f0faf7d11ee21adcb5f91b8c33a340b6c2c",{"type":2781,"url":3541},{"type":2771,"url":3738},{"type":2781,"url":3545},{"type":2774,"url":4724},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7488-6r32-c95q",[3549,3550,3551,3552],{"id":174,"slug":4727,"dossier":45,"summary":4728,"aliases":4729,"sourceIds":4732,"published":4733,"modified":4734,"checkedAt":7,"severity":4735,"references":4737,"versionKeys":4748,"packageCount":32,"repositoryCount":682},"ghsa-752w-5fwx-jx9f-389afa77","PyJWT accepts unknown `crit` header extensions",[4730,4731],"CVE-2026-32597","PYSEC-2026-120",[174,4731],"2026-03-13T19:55:09.500Z","2026-06-08T19:15:12.447890578Z",[4736],{"type":2764,"score":2802},[4738,4740,4742,4744,4746],{"type":2846,"url":4739},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-752w-5fwx-jx9f",{"type":2774,"url":4741},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32597",{"type":2781,"url":4743},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt",{"type":2771,"url":4745},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-120.yaml",{"type":2771,"url":4747},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00008.html",[4749,4750],"pypi:pyjwt@2.10.1","pypi:pyjwt@2.9.0",{"id":175,"slug":4752,"dossier":45,"summary":4753,"aliases":4754,"sourceIds":4757,"published":4758,"modified":4759,"checkedAt":7,"severity":4760,"references":4763,"versionKeys":4776,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[4755,4756],"CVE-2025-66034","PYSEC-2026-1389",[175,4756],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[4761],{"type":2764,"score":4762},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[4764,4766,4768,4770,4772,4774],{"type":2771,"url":4765},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":2774,"url":4767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":2771,"url":4769},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":2781,"url":4771},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":2781,"url":4773},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":2774,"url":4775},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[4777,4778,4779,4780,4781],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":176,"slug":4783,"dossier":45,"summary":4784,"aliases":4785,"sourceIds":4789,"published":4790,"modified":4791,"checkedAt":7,"severity":4792,"references":4798,"versionKeys":4810,"packageCount":32,"repositoryCount":64},"ghsa-78cv-mqj4-43f7-2021f695","Tornado has incomplete validation of cookie attributes",[4786,4787,4788],"CVE-2026-35536","GHSA-fqwm-6jpj-5wxc","PYSEC-2026-2287",[176,4787,4788],"2026-03-11T22:17:00Z","2026-07-13T16:45:06.531920939Z",[4793,4795,4797],{"type":2764,"score":4794},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"type":2764,"score":4796},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"type":2764,"score":3019},[4799,4801,4803,4804,4806,4808],{"type":2774,"url":4800},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-78cv-mqj4-43f7",{"type":2771,"url":4802},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F24a2d96ea115f663b223887deb0060f13974c104",{"type":2781,"url":3338},{"type":2771,"url":4805},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.5",{"type":2774,"url":4807},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35536",{"type":2774,"url":4809},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fqwm-6jpj-5wxc",[3346,3347,3348,3349],{"id":177,"slug":4812,"dossier":45,"summary":3813,"aliases":4813,"sourceIds":4816,"published":4817,"modified":4818,"checkedAt":7,"severity":4819,"references":4820,"versionKeys":4838,"packageCount":32,"repositoryCount":663},"ghsa-79v4-65xg-pq4g-b911b371",[4814,4815],"CVE-2024-12797","PYSEC-2026-1284",[177,4815],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4821,4823,4825,4827,4829,4831,4832,4834,4836],{"type":2771,"url":4822},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2774,"url":4824},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2771,"url":4826},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2771,"url":4828},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2771,"url":4830},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2781,"url":3824},{"type":2771,"url":4833},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2781,"url":4835},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2774,"url":4837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3828,3829,3830],{"id":178,"slug":4840,"dossier":45,"summary":4841,"aliases":4842,"sourceIds":4845,"published":4846,"modified":4847,"checkedAt":7,"severity":4848,"references":4850,"versionKeys":4863,"packageCount":32,"repositoryCount":682},"ghsa-7cx3-6m66-7c5m-cde5125c","Tornado vulnerable to excessive logging caused by malformed multipart form data",[4843,4844],"CVE-2025-47287","PYSEC-2026-1974",[178,4844],"2025-05-16T14:12:40Z","2026-07-07T17:56:45.268719923Z",[4849],{"type":2764,"score":2904},[4851,4853,4855,4857,4858,4860,4861],{"type":2771,"url":4852},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",{"type":2774,"url":4854},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47287",{"type":2771,"url":4856},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002Fb39b892bf78fe8fea01dd45199aa88307e7162f3",{"type":2781,"url":3338},{"type":2771,"url":4859},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00038.html",{"type":2781,"url":3340},{"type":2774,"url":4862},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7cx3-6m66-7c5m",[3346],{"id":179,"slug":4865,"dossier":45,"summary":4866,"aliases":4867,"sourceIds":4870,"published":4871,"modified":4872,"checkedAt":7,"severity":4873,"references":4875,"versionKeys":4892,"packageCount":32,"repositoryCount":632},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4868,4869],"CVE-2025-62727","PYSEC-2026-1942",[179,4869],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4874],{"type":2764,"score":2904},[4876,4878,4880,4882,4885,4887,4889,4890],{"type":2771,"url":4877},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2774,"url":4879},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2809,"url":4881},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4883,"url":4884},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2781,"url":4886},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2771,"url":4888},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2781,"url":2884},{"type":2774,"url":4891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2889,2890,4893,4894],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":180,"slug":4896,"dossier":45,"summary":4897,"aliases":4898,"sourceIds":4901,"published":4902,"modified":4903,"checkedAt":7,"severity":4904,"references":4907,"versionKeys":4924,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4899,4900],"CVE-2026-0994","PYSEC-2026-1805",[180,4900],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4905],{"type":2767,"score":4906},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4908,4910,4912,4914,4916,4918,4920,4922],{"type":2774,"url":4909},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2771,"url":4911},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2771,"url":4913},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2771,"url":4915},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2771,"url":4917},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2781,"url":4919},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2781,"url":4921},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2774,"url":4923},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4925,4926,4927,4928,4929,4930,4931,4932,4933],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":181,"slug":4935,"dossier":45,"summary":4936,"aliases":4937,"sourceIds":4940,"published":4941,"modified":4942,"checkedAt":7,"severity":4943,"references":4946,"versionKeys":4960,"packageCount":32,"repositoryCount":32},"ghsa-7gw9-cf7v-778f-8b6e5034","pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM",[4938,4939],"CVE-2026-41312","PYSEC-2026-3011",[181,4939],"2026-04-16T21:30:00Z","2026-07-13T16:42:36.454088588Z",[4944,4945],{"type":2764,"score":3582},{"type":2767,"score":3584},[4947,4949,4951,4953,4955,4956,4957,4958],{"type":2771,"url":4948},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",{"type":2774,"url":4950},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41312",{"type":2771,"url":4952},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3734",{"type":2771,"url":4954},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fac734dab4eef92bcce50d503949b4d9887d89f11",{"type":2781,"url":2782},{"type":2771,"url":3596},{"type":2781,"url":2786},{"type":2774,"url":4959},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gw9-cf7v-778f",[2790],{"id":182,"slug":4962,"dossier":45,"summary":4963,"aliases":4964,"sourceIds":4967,"published":4968,"modified":4969,"checkedAt":7,"severity":4970,"references":4972,"versionKeys":4989,"packageCount":32,"repositoryCount":32},"ghsa-7hfw-26vp-jp8m-d08917d7","PyPDF's Manipulated FlateDecode streams can exhaust RAM",[4965,4966],"CVE-2025-55197","PYSEC-2026-1830",[182,4966],"2025-08-13T19:51:24Z","2026-07-07T17:57:06.843769097Z",[4971],{"type":2767,"score":3512},[4973,4975,4977,4979,4981,4982,4984,4986,4987],{"type":2771,"url":4974},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",{"type":2774,"url":4976},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-55197",{"type":2771,"url":4978},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fissues\u002F3429",{"type":2771,"url":4980},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3430",{"type":2781,"url":2782},{"type":2771,"url":4983},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fblob\u002F0dd57738bbdcdb63f0fb43d8a6b3d222b6946595\u002Fpypdf\u002Ffilters.py#L72-L143",{"type":2771,"url":4985},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.0.0",{"type":2781,"url":2786},{"type":2774,"url":4988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7hfw-26vp-jp8m",[2790],{"id":183,"slug":4991,"dossier":45,"summary":4992,"aliases":4993,"sourceIds":4996,"published":4997,"modified":4998,"checkedAt":7,"severity":4999,"references":5002,"versionKeys":5018,"packageCount":32,"repositoryCount":663},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[4994,4995],"CVE-2025-14009","PYSEC-2026-96",[183,4995],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[5000],{"type":2764,"score":5001},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5003,5005,5007,5009,5010,5012,5014,5016],{"type":2774,"url":5004},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":2771,"url":5006},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":2771,"url":5008},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":2781,"url":3432},{"type":2771,"url":5011},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":2771,"url":5013},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":2846,"url":5015},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":2774,"url":5017},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[3446,3447],{"id":184,"slug":5020,"dossier":45,"summary":5021,"aliases":5022,"sourceIds":5025,"published":5026,"modified":5027,"checkedAt":7,"severity":5028,"references":5030,"versionKeys":5034,"packageCount":32,"repositoryCount":594},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[5023,5024],"CVE-2026-54283","PYSEC-2026-249",[184,5024],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[5029],{"type":2764,"score":2904},[5031,5033],{"type":2774,"url":5032},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2781,"url":4886},[2888,2889,2890,4893,4894,5035,5036],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":185,"slug":5038,"dossier":45,"summary":5039,"aliases":5040,"sourceIds":5043,"published":5044,"modified":5045,"checkedAt":7,"severity":5046,"references":5048,"versionKeys":5057,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[5041,5042],"CVE-2026-49477","PYSEC-2026-3072",[185,5042],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[5047],{"type":2764,"score":2904},[5049,5051,5052,5053,5055],{"type":2771,"url":5050},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2781,"url":3046},{"type":2781,"url":3048},{"type":2774,"url":5054},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":2774,"url":5056},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[3054,3055,3056],{"id":186,"slug":5059,"dossier":45,"summary":5060,"aliases":5061,"sourceIds":5064,"published":5065,"modified":5066,"checkedAt":7,"severity":5067,"references":5074,"versionKeys":5092,"packageCount":32,"repositoryCount":663},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[5062,5063],"CVE-2025-71408","PYSEC-2026-3657",[186,5063],"2026-07-24T22:16:50.063Z","2026-08-12T19:59:11.940439452Z",[5068,5070,5072],{"type":2764,"score":5069},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2767,"score":5071},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2767,"score":5073},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5075,5077,5079,5081,5083,5084,5086,5088,5090],{"type":2774,"url":5076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":2809,"url":5078},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":2809,"url":5080},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":2771,"url":5082},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":2781,"url":3432},{"type":2774,"url":5085},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":2771,"url":5087},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":2809,"url":5089},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":2846,"url":5091},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",[3446,3447],{"id":187,"slug":5094,"dossier":45,"summary":5095,"aliases":5096,"sourceIds":5100,"published":5101,"modified":5102,"checkedAt":7,"severity":5103,"references":5105,"versionKeys":5142,"packageCount":32,"repositoryCount":594},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[5097,5098,5099],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[187,5098],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[5104],{"type":2764,"score":3250},[5106,5108,5110,5112,5114,5116,5118,5120,5122,5124,5125,5127,5130,5132,5134,5136,5138,5140],{"type":2774,"url":5107},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2774,"url":5109},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2809,"url":5111},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2771,"url":5113},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2816,"url":5115},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2771,"url":5117},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2771,"url":5119},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2771,"url":5121},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2771,"url":5123},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2781,"url":4886},{"type":2771,"url":5126},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":5128,"url":5129},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2771,"url":5131},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2771,"url":5133},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2771,"url":5135},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2771,"url":5137},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2816,"url":5139},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2774,"url":5141},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2888,2889,2890,4893,4894,5035,5036],{"id":188,"slug":5144,"dossier":45,"summary":5145,"aliases":5146,"sourceIds":5149,"published":5150,"modified":5151,"checkedAt":7,"severity":5152,"references":5155,"versionKeys":5168,"packageCount":32,"repositoryCount":32},"ghsa-87mj-5ggw-8qc3-307f9690","pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream",[5147,5148],"CVE-2026-33699","PYSEC-2026-3012",[188,5148],"2026-03-25T20:05:22Z","2026-07-13T16:42:35.293920191Z",[5153],{"type":2767,"score":5154},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5156,5158,5160,5162,5163,5165,5166],{"type":2771,"url":5157},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",{"type":2774,"url":5159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33699",{"type":2771,"url":5161},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3693",{"type":2781,"url":2782},{"type":2771,"url":5164},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.2",{"type":2781,"url":2786},{"type":2774,"url":5167},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87mj-5ggw-8qc3",[2790],{"id":189,"slug":5170,"dossier":45,"summary":5171,"aliases":5172,"sourceIds":5176,"published":5177,"modified":5178,"checkedAt":7,"severity":5179,"references":5183,"versionKeys":5205,"packageCount":32,"repositoryCount":613},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[5173,5174,5175],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[189,5175],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[5180,5181],{"type":2764,"score":3127},{"type":2767,"score":5182},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5184,5186,5188,5190,5192,5194,5195,5197,5199,5201,5203],{"type":2774,"url":5185},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2771,"url":5187},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2771,"url":5189},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2771,"url":5191},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2771,"url":5193},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2781,"url":3143},{"type":2771,"url":5196},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2771,"url":5198},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2771,"url":5200},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2781,"url":5202},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2774,"url":5204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[3155,3156,3157,5206,5207],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":190,"slug":5209,"dossier":45,"summary":5210,"aliases":5211,"sourceIds":5214,"published":5215,"modified":5216,"checkedAt":7,"severity":5217,"references":5219,"versionKeys":5229,"packageCount":32,"repositoryCount":594},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[5212,5213],"CVE-2026-59885","PYSEC-2026-3456",[190,5213],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[5218],{"type":2764,"score":2904},[5220,5222,5224,5226,5227],{"type":2774,"url":5221},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":2774,"url":5223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":2809,"url":5225},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":2781,"url":4370},{"type":2774,"url":5228},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[4378,5230],"pypi:pyasn1@0.6.3",{"id":191,"slug":5232,"dossier":45,"summary":5233,"aliases":5234,"sourceIds":5237,"published":5238,"modified":5239,"checkedAt":7,"severity":5240,"references":5243,"versionKeys":5262,"packageCount":32,"repositoryCount":663},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[5235,5236],"CVE-2025-4565","PYSEC-2026-1806",[191,5236],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[5241],{"type":2767,"score":5242},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5244,5246,5248,5250,5252,5253,5255,5257,5259,5260],{"type":2771,"url":5245},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2771,"url":5247},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2774,"url":5249},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2771,"url":5251},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2781,"url":4919},{"type":2771,"url":5254},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2771,"url":5256},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2771,"url":5258},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2781,"url":4921},{"type":2774,"url":5261},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4925,4927,4928],{"id":192,"slug":5264,"dossier":89,"summary":5265,"aliases":5266,"sourceIds":5270,"published":5271,"modified":5272,"checkedAt":7,"severity":5273,"references":5275,"versionKeys":5285,"packageCount":32,"repositoryCount":101},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[5267,5268,5269],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[192,5269],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[5274],{"type":2764,"score":2904},[5276,5278,5280,5281,5283,5284],{"type":2846,"url":5277},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2774,"url":5279},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2809,"url":3396},{"type":2771,"url":5282},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2781,"url":3400},{"type":2774,"url":3402},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":193,"slug":5287,"dossier":45,"summary":5288,"aliases":5289,"sourceIds":5292,"published":5293,"modified":5294,"checkedAt":7,"severity":5295,"references":5297,"versionKeys":5310,"packageCount":32,"repositoryCount":682},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[5290,5291],"CVE-2025-5197","PYSEC-2026-1983",[193,5291],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[5296],{"type":2764,"score":3645},[5298,5300,5302,5304,5305,5307,5308],{"type":2774,"url":5299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2771,"url":5301},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2771,"url":5303},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2781,"url":2844},{"type":2771,"url":5306},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2781,"url":3180},{"type":2774,"url":5309},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2851,2852],{"id":194,"slug":5312,"dossier":45,"summary":5313,"aliases":5314,"sourceIds":5317,"published":5318,"modified":5319,"checkedAt":7,"severity":5320,"references":5323,"versionKeys":5334,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[5315,5316],"CVE-2025-53643","PYSEC-2026-1104",[194,5316],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[5321],{"type":2767,"score":5322},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5324,5326,5328,5330,5331,5332],{"type":2771,"url":5325},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2774,"url":5327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2809,"url":5329},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":5333},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2913,2914,2915,2916],{"id":195,"slug":5336,"dossier":45,"summary":5337,"aliases":5338,"sourceIds":5341,"published":5342,"modified":5343,"checkedAt":7,"severity":5344,"references":5348,"versionKeys":5357,"packageCount":32,"repositoryCount":574},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[5339,5340],"CVE-2026-34518","PYSEC-2026-2100",[195,5340],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[5345,5347],{"type":2764,"score":5346},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2767,"score":3915},[5349,5351,5353,5355,5356],{"type":2809,"url":5350},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2774,"url":5352},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2809,"url":5354},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":196,"slug":5359,"dossier":45,"summary":5360,"aliases":5361,"sourceIds":5364,"published":5365,"modified":5366,"checkedAt":7,"severity":5367,"references":5370,"versionKeys":5380,"packageCount":32,"repositoryCount":682},"ghsa-993g-76c3-p5m4-f823cd66","PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file:\u002F\u002F, ftp:\u002F\u002F, data: schemes",[5362,5363],"CVE-2026-48522","PYSEC-2026-175",[196,5363],"2026-05-28T16:16:29.150Z","2026-07-31T22:15:22.444788060Z",[5368],{"type":2764,"score":5369},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5371,5373,5375,5377,5378],{"type":2846,"url":5372},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-993g-76c3-p5m4",{"type":2774,"url":5374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48522",{"type":2771,"url":5376},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8521",{"type":2781,"url":4743},{"type":2771,"url":5379},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-175.yaml",[4749,4750],{"id":197,"slug":5382,"dossier":45,"summary":5383,"aliases":5384,"sourceIds":5387,"published":5388,"modified":5389,"checkedAt":7,"severity":5390,"references":5392,"versionKeys":5407,"packageCount":32,"repositoryCount":32},"ghsa-996q-pr4m-cvgq-d5dc33e5","pypdf has a possible infinite loop when processing TreeObject",[5385,5386],"CVE-2026-27024","PYSEC-2026-3013",[197,5386],"2026-02-18T22:40:49Z","2026-07-13T16:43:40.532306824Z",[5391],{"type":2767,"score":3796},[5393,5395,5397,5399,5401,5402,5404,5405],{"type":2771,"url":5394},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",{"type":2774,"url":5396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27024",{"type":2771,"url":5398},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3645",{"type":2771,"url":5400},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fbd2f6d052fe5941e85e37082c2a43453d48d1295",{"type":2781,"url":2782},{"type":2771,"url":5403},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.1",{"type":2781,"url":2786},{"type":2774,"url":5406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-996q-pr4m-cvgq",[2790],{"id":198,"slug":5409,"dossier":45,"summary":5410,"aliases":5411,"sourceIds":5414,"published":5415,"modified":5416,"checkedAt":7,"severity":5417,"references":5420,"versionKeys":5439,"packageCount":32,"repositoryCount":613},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[5412,5413],"CVE-2024-47081","PYSEC-2026-1872",[198,5413],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[5418],{"type":2764,"score":5419},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5421,5423,5425,5427,5429,5431,5433,5435,5437],{"type":2771,"url":5422},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2774,"url":5424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2771,"url":5426},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2809,"url":5428},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2781,"url":5430},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2771,"url":5432},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2771,"url":5434},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2781,"url":5436},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2774,"url":5438},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[5440,5441],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":199,"slug":5443,"dossier":89,"summary":5444,"aliases":5445,"sourceIds":5449,"published":5450,"modified":5451,"checkedAt":7,"severity":5452,"references":5454,"versionKeys":5467,"packageCount":32,"repositoryCount":101},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[5446,5447,5448],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[199,5448],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[5453],{"type":2764,"score":2904},[5455,5457,5459,5461,5463,5465,5466],{"type":2846,"url":5456},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2774,"url":5458},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2809,"url":5460},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2809,"url":5462},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2771,"url":5464},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2781,"url":3400},{"type":2774,"url":4273},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":200,"slug":5469,"dossier":45,"summary":5470,"aliases":5471,"sourceIds":5474,"published":5475,"modified":5476,"checkedAt":7,"severity":5477,"references":5479,"versionKeys":5494,"packageCount":32,"repositoryCount":32},"ghsa-9m86-7pmv-2852-af0bf52f","pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams",[5472,5473],"CVE-2026-28804","PYSEC-2026-3014",[200,5473],"2026-03-02T22:03:45Z","2026-07-13T16:42:53.625666226Z",[5478],{"type":2767,"score":3222},[5480,5482,5484,5486,5488,5489,5491,5492],{"type":2771,"url":5481},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",{"type":2774,"url":5483},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28804",{"type":2771,"url":5485},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3666",{"type":2771,"url":5487},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F648c627d2657447dfb1773412af05a0a5103b98f",{"type":2781,"url":2782},{"type":2771,"url":5490},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.5",{"type":2781,"url":2786},{"type":2774,"url":5493},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9m86-7pmv-2852",[2790],{"id":201,"slug":5496,"dossier":45,"summary":5497,"aliases":5498,"sourceIds":5501,"published":5502,"modified":5503,"checkedAt":7,"severity":5504,"references":5506,"versionKeys":5520,"packageCount":32,"repositoryCount":32},"ghsa-9mvc-8737-8j8h-7d8c6e58","pypdf possibly has long runtimes for malformed FlateDecode streams",[5499,5500],"CVE-2026-27026","PYSEC-2026-3015",[201,5500],"2026-02-18T22:41:24Z","2026-07-13T16:42:59.576223829Z",[5505],{"type":2767,"score":3796},[5507,5509,5511,5513,5515,5516,5517,5518],{"type":2771,"url":5508},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",{"type":2774,"url":5510},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27026",{"type":2771,"url":5512},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3644",{"type":2771,"url":5514},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7905842d833f899f1d3228af7e7467ad80277016",{"type":2781,"url":2782},{"type":2771,"url":5403},{"type":2781,"url":2786},{"type":2774,"url":5519},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9mvc-8737-8j8h",[2790],{"id":202,"slug":5522,"dossier":45,"summary":5523,"aliases":5524,"sourceIds":5527,"published":5528,"modified":5529,"checkedAt":7,"severity":5530,"references":5533,"versionKeys":5550,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[5525,5526],"CVE-2024-35195","PYSEC-2026-1873",[202,5526],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[5531],{"type":2764,"score":5532},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5534,5536,5538,5540,5542,5543,5545,5547,5548],{"type":2771,"url":5535},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2774,"url":5537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2771,"url":5539},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2809,"url":5541},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2781,"url":5430},{"type":2771,"url":5544},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2771,"url":5546},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2781,"url":5436},{"type":2774,"url":5549},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[5440],{"id":203,"slug":5552,"dossier":45,"summary":5553,"aliases":5554,"sourceIds":5557,"published":5558,"modified":5559,"checkedAt":7,"severity":5560,"references":5564,"versionKeys":5570,"packageCount":32,"repositoryCount":574},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[5555,5556],"CVE-2026-54280","PYSEC-2026-2113",[203,5556],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[5561,5563],{"type":2767,"score":5562},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":2904},[5565,5567,5569],{"type":2774,"url":5566},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2809,"url":5568},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":204,"slug":5572,"dossier":45,"summary":5573,"aliases":5574,"sourceIds":5577,"published":5578,"modified":5579,"checkedAt":7,"severity":5580,"references":5583,"versionKeys":5593,"packageCount":32,"repositoryCount":632},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[5575,5576],"CVE-2026-44660","PYSEC-2026-2293",[204,5576],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[5581,5582],{"type":2764,"score":2904},{"type":2767,"score":3968},[5584,5586,5588,5590,5591],{"type":2809,"url":5585},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2774,"url":5587},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2809,"url":5589},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2781,"url":3261},{"type":2774,"url":5592},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[3265,3266],{"id":205,"slug":5595,"dossier":45,"summary":5596,"aliases":5597,"sourceIds":5600,"published":5601,"modified":5602,"checkedAt":7,"severity":5603,"references":5607,"versionKeys":5618,"packageCount":32,"repositoryCount":574},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[5598,5599],"CVE-2026-34525","PYSEC-2026-2103",[205,5599],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[5604,5606],{"type":2767,"score":5605},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2764,"score":3019},[5608,5610,5612,5614,5616,5617],{"type":2809,"url":5609},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2774,"url":5611},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2809,"url":5613},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2809,"url":5615},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":206,"slug":5620,"dossier":45,"summary":5621,"aliases":5622,"sourceIds":5626,"published":5627,"modified":5628,"checkedAt":7,"severity":5629,"references":5634,"versionKeys":5650,"packageCount":32,"repositoryCount":682},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[5623,5624,5625],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[206],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[5630,5632],{"type":2764,"score":5631},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2767,"score":5633},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5635,5637,5639,5641,5642,5644,5646,5648],{"type":2774,"url":5636},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2771,"url":5638},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2771,"url":5640},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2781,"url":3143},{"type":2771,"url":5643},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2771,"url":5645},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2771,"url":5647},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2771,"url":5649},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[3155,3156],{"id":207,"slug":5652,"dossier":45,"summary":5653,"aliases":5654,"sourceIds":5657,"published":5658,"modified":5659,"checkedAt":7,"severity":5660,"references":5662,"versionKeys":5678,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[5655,5656],"CVE-2026-32875","PYSEC-2026-2292",[207,5656],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[5661],{"type":2764,"score":2904},[5663,5665,5667,5669,5671,5672,5674,5676],{"type":2846,"url":5664},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2774,"url":5666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":3136,"url":5668},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2809,"url":5670},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2781,"url":3261},{"type":2771,"url":5673},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2771,"url":5675},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":3136,"url":5677},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[3265],{"id":208,"slug":5680,"dossier":45,"summary":5681,"aliases":5682,"sourceIds":5685,"published":5686,"modified":5687,"checkedAt":7,"severity":5688,"references":5690,"versionKeys":5702,"packageCount":32,"repositoryCount":632},"ghsa-c98p-7wgm-6p64-ef7ac7e3","Tornado: Quadratic DoS via Repeated Header Coalescing",[5683,5684],"CVE-2025-67725","PYSEC-2025-266",[208,5684],"2025-12-12T06:15:41.380Z","2026-07-20T19:15:27.567094965Z",[5689],{"type":2764,"score":2904},[5691,5693,5695,5697,5699,5700],{"type":2774,"url":5692},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-c98p-7wgm-6p64",{"type":2774,"url":5694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67725",{"type":2809,"url":5696},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F771472cfdaeebc0d89a9cc46e249f8891a6b29cd",{"type":2771,"url":5698},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-266.yaml",{"type":2781,"url":3338},{"type":2774,"url":5701},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.3",[3346,3347,3348],{"id":209,"slug":5704,"dossier":45,"summary":5705,"aliases":5706,"sourceIds":5710,"published":5711,"modified":5712,"checkedAt":7,"severity":5713,"references":5717,"versionKeys":5755,"packageCount":32,"repositoryCount":418},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[5707,5708,5709],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[209,5709],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[5714,5716],{"type":2767,"score":5715},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2764,"score":2904},[5718,5720,5722,5724,5726,5728,5729,5731,5733,5735,5736,5738,5740,5742,5743,5745,5747,5749,5751,5753],{"type":2771,"url":5719},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2774,"url":5721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2771,"url":5723},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2771,"url":5725},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2771,"url":5727},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2781,"url":3400},{"type":2771,"url":5730},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2771,"url":5732},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2771,"url":5734},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2774,"url":3438},{"type":2774,"url":5737},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2774,"url":5739},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2774,"url":5741},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2774,"url":3440},{"type":2774,"url":5744},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2774,"url":5746},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":2774,"url":5748},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2774,"url":5750},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2774,"url":5752},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2774,"url":5754},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[3404,3405,3406,3407,3408,3409,3410],{"id":210,"slug":5757,"dossier":45,"summary":5758,"aliases":5759,"sourceIds":5762,"published":5763,"modified":5764,"checkedAt":7,"severity":5765,"references":5768,"versionKeys":5780,"packageCount":32,"repositoryCount":32},"ghsa-cj93-chg6-vgv8-f22674c0","pypdf: Possible large memory usage for large offsets for layout mode text",[5760,5761],"CVE-2026-48155","PYSEC-2026-3016",[210,5761],"2026-06-12T18:29:15Z","2026-07-13T16:43:35.317206583Z",[5766],{"type":2767,"score":5767},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5769,5771,5773,5775,5776,5777,5778],{"type":2771,"url":5770},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",{"type":2774,"url":5772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48155",{"type":2771,"url":5774},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3790",{"type":2781,"url":2782},{"type":2771,"url":2784},{"type":2781,"url":2786},{"type":2774,"url":5779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cj93-chg6-vgv8",[2790],{"id":211,"slug":5782,"dossier":45,"summary":5783,"aliases":5784,"sourceIds":5787,"published":5788,"modified":5789,"checkedAt":7,"severity":5790,"references":5795,"versionKeys":5802,"packageCount":32,"repositoryCount":32},"ghsa-cmw6-hcpp-c6jp-09e640f2","ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load",[5785,5786],"CVE-2026-34446","PYSEC-2026-2241",[211,5786],"2026-04-01T18:16:30.660Z","2026-07-13T07:26:29.841410544Z",[5791,5793],{"type":2764,"score":5792},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2764,"score":5794},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5796,5798,5800,5801],{"type":2774,"url":5797},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-cmw6-hcpp-c6jp",{"type":2774,"url":5799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34446",{"type":2809,"url":3286},{"type":2781,"url":3288},[3298],{"id":212,"slug":5804,"dossier":45,"summary":5805,"aliases":5806,"sourceIds":5809,"published":5810,"modified":5811,"checkedAt":7,"severity":5812,"references":5815,"versionKeys":5832,"packageCount":32,"repositoryCount":682},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5807,5808],"CVE-2025-27516","PYSEC-2026-1471",[212,5808],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5813],{"type":2767,"score":5814},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5816,5818,5820,5822,5824,5826,5828,5830],{"type":2771,"url":5817},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2774,"url":5819},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2809,"url":5821},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2781,"url":5823},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2771,"url":5825},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2771,"url":5827},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2781,"url":5829},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2774,"url":5831},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5833,5834],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":213,"slug":5836,"dossier":45,"summary":5837,"aliases":5838,"sourceIds":5841,"published":5842,"modified":5843,"checkedAt":7,"severity":5844,"references":5848,"versionKeys":5874,"packageCount":32,"repositoryCount":32},"ghsa-cq27-v7xp-c356-7e0c8261","Buffer Overflow in pycrypto",[5839,5840],"CVE-2013-7459","PYSEC-2017-94",[213,5840],"2017-02-15T15:59:00Z","2024-10-18T22:23:12.251504Z",[5845,5847],{"type":2764,"score":5846},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2767,"score":3891},[5849,5851,5853,5855,5857,5859,5860,5862,5864,5866,5868,5870,5872],{"type":2774,"url":5850},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2013-7459",{"type":3136,"url":5852},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fissues\u002F176",{"type":2809,"url":5854},"https:\u002F\u002Fgithub.com\u002Fdlitz\u002Fpycrypto\u002Fcommit\u002F8dbe0dc3eea5c689d4f76b37b93fe216cf1f00d4",{"type":3136,"url":5856},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1409754",{"type":2774,"url":5858},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq27-v7xp-c356",{"type":2781,"url":4402},{"type":2771,"url":5861},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycrypto\u002FPYSEC-2017-94.yaml",{"type":2771,"url":5863},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FC6BWNADPLKDBBQBUT3P75W7HAJCE7M3B",{"type":2771,"url":5865},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FRJ37R2YLX56YZABFNAOWV4VTHTGYREAE",{"type":2774,"url":5867},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201702-14",{"type":2771,"url":5869},"https:\u002F\u002Fpony7.fr\u002Fctf:public:32c3:cryptmsg",{"type":2771,"url":5871},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FRJ37R2YLX56YZABFNAOWV4VTHTGYREAE\u002F",{"type":2771,"url":5873},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FC6BWNADPLKDBBQBUT3P75W7HAJCE7M3B\u002F",[4418],{"id":214,"slug":5876,"dossier":45,"summary":5877,"aliases":5878,"sourceIds":5881,"published":5882,"modified":5883,"checkedAt":7,"severity":5884,"references":5887,"versionKeys":5902,"packageCount":32,"repositoryCount":5904},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[5879,5880],"CVE-2026-69244","PYSEC-2026-3545",[214,5880],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[5885],{"type":2767,"score":5886},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5888,5890,5892,5894,5895,5897,5898,5900],{"type":2771,"url":5889},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2771,"url":5891},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2771,"url":5893},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2781,"url":2909},{"type":2771,"url":5896},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2781,"url":3925},{"type":2774,"url":5899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2774,"url":5901},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2913,2914,2915,2916,2917,2918,2919,2920,5903],"pypi:aiohttp@3.14.1",11,{"id":215,"slug":5906,"dossier":45,"summary":5907,"aliases":5908,"sourceIds":5911,"published":5912,"modified":5913,"checkedAt":7,"severity":5914,"references":5917,"versionKeys":5928,"packageCount":32,"repositoryCount":64},"ghsa-cx3h-4qpv-8hc9-3078b6fa","Tornado has out-of-bounds memory access via C extension",[5909,5910],"CVE-2026-49854","PYSEC-2026-3388",[215,5910],"2026-06-12T18:30:19Z","2026-07-13T16:43:34.663472817Z",[5915],{"type":2764,"score":5916},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[5918,5920,5921,5923,5924,5926],{"type":2771,"url":5919},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2781,"url":3338},{"type":2771,"url":5922},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Freleases\u002Ftag\u002Fv6.5.6",{"type":2781,"url":3340},{"type":2774,"url":5925},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx3h-4qpv-8hc9",{"type":2774,"url":5927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49854",[3346,3347,3348,3349,3350],{"id":216,"slug":5930,"dossier":45,"summary":5931,"aliases":5932,"sourceIds":5936,"published":5937,"modified":5938,"checkedAt":7,"severity":5939,"references":5944,"versionKeys":5960,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5933,5934,5935],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[216,5935],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[5940,5942],{"type":2764,"score":5941},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2767,"score":5943},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5945,5947,5949,5951,5952,5954,5956,5958],{"type":2774,"url":5946},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2771,"url":5948},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2771,"url":5950},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2781,"url":4145},{"type":2771,"url":5953},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2771,"url":5955},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2781,"url":5957},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2774,"url":5959},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[4151],{"id":217,"slug":5962,"dossier":45,"summary":5963,"aliases":5964,"sourceIds":5967,"published":5968,"modified":5969,"checkedAt":7,"severity":5970,"references":5972,"versionKeys":5987,"packageCount":32,"repositoryCount":32},"ghsa-f2v5-7jq9-h8cg-c32868fb","pypdf: Manipulated RunLengthDecode streams can exhaust RAM",[5965,5966],"CVE-2026-28351","PYSEC-2026-3017",[217,5966],"2026-02-28T02:46:10Z","2026-07-13T16:43:26.452272481Z",[5971],{"type":2767,"score":3222},[5973,5975,5977,5979,5981,5982,5984,5985],{"type":2771,"url":5974},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",{"type":2774,"url":5976},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28351",{"type":2771,"url":5978},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3664",{"type":2771,"url":5980},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff309c6003746414dc7b5048c19e6d879ff2dc858",{"type":2781,"url":2782},{"type":2771,"url":5983},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.4",{"type":2781,"url":2786},{"type":2774,"url":5986},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f2v5-7jq9-h8cg",[2790],{"id":218,"slug":5989,"dossier":45,"summary":5990,"aliases":5991,"sourceIds":5995,"published":5996,"modified":5997,"checkedAt":7,"severity":5998,"references":6003,"versionKeys":6021,"packageCount":32,"repositoryCount":682},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5992,5993,5994],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[218],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5999,6001],{"type":2764,"score":6000},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2767,"score":6002},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[6004,6006,6008,6010,6012,6014,6015,6017,6019],{"type":2774,"url":6005},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2771,"url":6007},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2771,"url":6009},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2771,"url":6011},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2771,"url":6013},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2781,"url":3143},{"type":2771,"url":6016},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2771,"url":6018},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2771,"url":6020},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[3155,3156],{"id":219,"slug":6023,"dossier":45,"summary":6024,"aliases":6025,"sourceIds":6028,"published":6029,"modified":6030,"checkedAt":7,"severity":6031,"references":6033,"versionKeys":6046,"packageCount":32,"repositoryCount":32},"ghsa-f83h-ghpp-7wcc-fde96eee","Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc",[6026,6027],"CVE-2025-70559","PYSEC-2026-1761",[219,6027],"2025-11-07T23:17:05Z","2026-07-08T07:38:27.593871221Z",[6032],{"type":2764,"score":5069},[6034,6036,6038,6040,6042,6044],{"type":2771,"url":6035},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",{"type":2774,"url":6037},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-70559",{"type":2771,"url":6039},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fcommit\u002Fb808ee05dd7f0c8ea8ec34bdf394d40e63501086",{"type":2781,"url":6041},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six",{"type":2781,"url":6043},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpdfminer-six",{"type":2774,"url":6045},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f83h-ghpp-7wcc",[6047],"pypi:pdfminer-six@20240706",{"id":220,"slug":6049,"dossier":45,"summary":6050,"aliases":6051,"sourceIds":6054,"published":6055,"modified":6056,"checkedAt":7,"severity":6057,"references":6061,"versionKeys":6072,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[6052,6053],"CVE-2024-47874","PYSEC-2026-1943",[220,6053],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[6058,6060],{"type":2764,"score":6059},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2767,"score":3968},[6062,6064,6066,6068,6069,6070],{"type":2771,"url":6063},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2774,"url":6065},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2809,"url":6067},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2781,"url":2878},{"type":2781,"url":2884},{"type":2774,"url":6071},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2888],{"id":221,"slug":6074,"dossier":45,"summary":6075,"aliases":6076,"sourceIds":6079,"published":6080,"modified":6081,"checkedAt":7,"severity":6082,"references":6084,"versionKeys":6093,"packageCount":32,"repositoryCount":663},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[6077,6078],"CVE-2026-12061","PYSEC-2026-3582",[221,6078],"2026-07-31T16:51:09Z","2026-08-06T15:11:53.004587618Z",[6083],{"type":2764,"score":2904},[6085,6087,6088,6089,6091],{"type":2771,"url":6086},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":2781,"url":3432},{"type":2781,"url":4550},{"type":2774,"url":6090},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":2774,"url":6092},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[3446,3447],{"id":222,"slug":6095,"dossier":45,"summary":6096,"aliases":6097,"sourceIds":6100,"published":6101,"modified":6102,"checkedAt":7,"severity":6103,"references":6108,"versionKeys":6131,"packageCount":32,"repositoryCount":594},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[6098,6099],"CVE-2026-5241","PYSEC-2026-2290",[222,6099],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[6104,6106],{"type":2764,"score":6105},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2764,"score":6107},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[6109,6111,6113,6115,6116,6118,6120,6122,6123,6125,6127,6129],{"type":2774,"url":6110},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2809,"url":6112},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2774,"url":6114},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2774,"url":3442},{"type":2771,"url":6117},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2771,"url":6119},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":3136,"url":6121},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2781,"url":2844},{"type":2771,"url":6124},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2846,"url":6126},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2771,"url":6128},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2774,"url":6130},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2851,2852,2853,2854,2855,2856,2857],{"id":223,"slug":6133,"dossier":45,"summary":6134,"aliases":6135,"sourceIds":6138,"published":6139,"modified":6140,"checkedAt":7,"severity":6141,"references":6144,"versionKeys":6157,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[6136,6137],"CVE-2024-8984","PYSEC-2026-1545",[223,6137],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[6142],{"type":2764,"score":6143},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[6145,6147,6149,6150,6152,6154,6155],{"type":2774,"url":6146},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2771,"url":6148},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2781,"url":3541},{"type":2771,"url":6151},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2771,"url":6153},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2781,"url":3545},{"type":2774,"url":6156},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[3549],{"id":224,"slug":6159,"dossier":45,"summary":6160,"aliases":6161,"sourceIds":6164,"published":6165,"modified":6166,"checkedAt":7,"severity":6167,"references":6170,"versionKeys":6181,"packageCount":32,"repositoryCount":613},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[6162,6163],"CVE-2025-69230","PYSEC-2026-1105",[224,6163],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[6168],{"type":2767,"score":6169},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6171,6173,6175,6177,6178,6179],{"type":2771,"url":6172},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2774,"url":6174},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2809,"url":6176},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":6180},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2913,2914,2915,2916,2917,2918,2919],{"id":225,"slug":6183,"dossier":45,"summary":6184,"aliases":6185,"sourceIds":6188,"published":6189,"modified":6190,"checkedAt":7,"severity":6191,"references":6194,"versionKeys":6204,"packageCount":32,"repositoryCount":682},"ghsa-fhv5-28vv-h8m8-c54a3f91","PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)",[6186,6187],"CVE-2026-48524","PYSEC-2026-177",[225,6187],"2026-05-28T16:16:29.403Z","2026-07-31T22:15:22.446184166Z",[6192],{"type":2764,"score":6193},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6195,6197,6199,6201,6202],{"type":2774,"url":6196},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-fhv5-28vv-h8m8",{"type":2774,"url":6198},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48524",{"type":2771,"url":6200},"https:\u002F\u002Fgithub.com\u002Fgithub\u002Fadvisory-database\u002Fpull\u002F8522",{"type":2781,"url":4743},{"type":2771,"url":6203},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-177.yaml",[4749,4750],{"id":226,"slug":6206,"dossier":89,"summary":6207,"aliases":6208,"sourceIds":6212,"published":6213,"modified":6214,"checkedAt":7,"severity":6215,"references":6218,"versionKeys":6232,"packageCount":32,"repositoryCount":101},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[6209,6210,6211],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[226,6211],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[6216],{"type":2764,"score":6217},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6219,6221,6223,6225,6227,6228,6229,6230],{"type":2771,"url":6220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2774,"url":6222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2771,"url":6224},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2771,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2781,"url":3400},{"type":2771,"url":4273},{"type":2781,"url":4275},{"type":2774,"url":6231},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":227,"slug":6234,"dossier":45,"summary":6235,"aliases":6236,"sourceIds":6239,"published":6240,"modified":6241,"checkedAt":7,"severity":6242,"references":6245,"versionKeys":6256,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[6237,6238],"CVE-2025-0628","PYSEC-2026-1546",[227,6238],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[6243],{"type":2764,"score":6244},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6246,6248,6250,6251,6253,6254],{"type":2774,"url":6247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2771,"url":6249},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2781,"url":3541},{"type":2771,"url":6252},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2781,"url":3545},{"type":2774,"url":6255},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[3549],{"id":228,"slug":6258,"dossier":45,"summary":6259,"aliases":6260,"sourceIds":6263,"published":6264,"modified":6265,"checkedAt":7,"severity":6266,"references":6268,"versionKeys":6283,"packageCount":32,"repositoryCount":682},"ghsa-fp3f-mc75-235c-03ef9ecd","pypdf: Possible large memory usage for large \u002FToUnicode streams",[6261,6262],"CVE-2026-71870","PYSEC-2026-3655",[228,6262],"2026-08-07T19:29:09Z","2026-08-10T11:40:56.634574772Z",[6267],{"type":2767,"score":5767},[6269,6271,6273,6275,6276,6278,6279,6281],{"type":2771,"url":6270},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":2771,"url":6272},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3944",{"type":2771,"url":6274},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fafba8080e19d29a3c256a742b340995e695b35aa",{"type":2781,"url":2782},{"type":2771,"url":6277},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.15.0",{"type":2781,"url":2786},{"type":2774,"url":6280},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fp3f-mc75-235c",{"type":2774,"url":6282},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71870",[2790,6284],"pypi:pypdf@6.14.2",{"id":229,"slug":6286,"dossier":45,"summary":4652,"aliases":6287,"sourceIds":6290,"published":6291,"modified":6292,"checkedAt":7,"severity":6293,"references":6296,"versionKeys":6307,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[6288,6289],"CVE-2025-1194","PYSEC-2026-1984",[229,6289],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[6294],{"type":2764,"score":6295},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[6297,6299,6301,6302,6304,6305],{"type":2774,"url":6298},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2771,"url":6300},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2781,"url":2844},{"type":2771,"url":6303},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2781,"url":3180},{"type":2774,"url":6306},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2851],{"id":230,"slug":6309,"dossier":45,"summary":6310,"aliases":6311,"sourceIds":6314,"published":6315,"modified":6316,"checkedAt":7,"severity":6317,"references":6319,"versionKeys":6333,"packageCount":32,"repositoryCount":682},"ghsa-fwg2-594c-jp42-71ea2530","pypdf: Possible long runtimes\u002Flarge memory usage for large CID font width ranges",[6312,6313],"CVE-2026-71852","PYSEC-2026-3656",[230,6313],"2026-08-07T18:54:00Z","2026-08-10T11:40:57.725619888Z",[6318],{"type":2767,"score":5767},[6320,6322,6324,6326,6327,6328,6329,6331],{"type":2771,"url":6321},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":2771,"url":6323},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3946",{"type":2771,"url":6325},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F51cb6acf9e8a35b77e90b4d87d28fe3e1416d7d7",{"type":2781,"url":2782},{"type":2771,"url":6277},{"type":2781,"url":2786},{"type":2774,"url":6330},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fwg2-594c-jp42",{"type":2774,"url":6332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-71852",[2790,6284],{"id":231,"slug":6335,"dossier":45,"summary":6336,"aliases":6337,"sourceIds":6340,"published":6341,"modified":6342,"checkedAt":7,"severity":6343,"references":6346,"versionKeys":6352,"packageCount":32,"repositoryCount":574},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[6338,6339],"CVE-2026-54278","PYSEC-2026-2111",[231,6339],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[6344,6345],{"type":2767,"score":3512},{"type":2764,"score":2904},[6347,6349,6350],{"type":2774,"url":6348},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2781,"url":2909},{"type":2809,"url":6351},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2913,2914,2915,2916,2917,2918,2919,2920],{"id":232,"slug":6354,"dossier":45,"summary":6355,"aliases":6356,"sourceIds":6359,"published":6360,"modified":6361,"checkedAt":7,"severity":6362,"references":6365,"versionKeys":6378,"packageCount":32,"repositoryCount":613},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[6357,6358],"CVE-2026-69247","PYSEC-2026-3552",[232,6358],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[6363],{"type":2767,"score":6364},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6366,6368,6370,6372,6373,6374,6376],{"type":2771,"url":6367},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2771,"url":6369},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2771,"url":6371},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2781,"url":3824},{"type":2781,"url":4835},{"type":2774,"url":6375},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2774,"url":6377},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[3830,3831,3832,3833,6379,6380],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":233,"slug":6382,"dossier":45,"summary":6383,"aliases":6384,"sourceIds":6387,"published":6388,"modified":6389,"checkedAt":7,"severity":6390,"references":6393,"versionKeys":6412,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[6385,6386],"CVE-2024-34062","PYSEC-2026-1976",[233,6386],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[6391],{"type":2764,"score":6392},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[6394,6396,6398,6400,6402,6404,6406,6408,6410],{"type":2771,"url":6395},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2774,"url":6397},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2771,"url":6399},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2781,"url":6401},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2771,"url":6403},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2771,"url":6405},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2771,"url":6407},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2781,"url":6409},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2774,"url":6411},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[6413],"pypi:tqdm@4.66.2",{"id":234,"slug":6415,"dossier":45,"summary":6416,"aliases":6417,"sourceIds":6420,"published":6421,"modified":6422,"checkedAt":7,"severity":6423,"references":6425,"versionKeys":6438,"packageCount":32,"repositoryCount":613},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[6418,6419],"CVE-2025-69229","PYSEC-2026-1106",[234,6419],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[6424],{"type":2767,"score":3512},[6426,6428,6430,6432,6434,6435,6436],{"type":2771,"url":6427},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2774,"url":6429},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2771,"url":6431},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2771,"url":6433},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":6437},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2913,2914,2915,2916,2917,2918,2919],{"id":235,"slug":6440,"dossier":45,"summary":6441,"aliases":6442,"sourceIds":6445,"published":6446,"modified":6447,"checkedAt":7,"severity":6448,"references":6450,"versionKeys":6465,"packageCount":32,"repositoryCount":32},"ghsa-g867-7843-wf8q-293fb10e","pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)",[6443,6444],"CVE-2026-59935","PYSEC-2026-3613",[235,6444],"2026-07-23T16:37:07Z","2026-08-04T14:41:08.867533593Z",[6449],{"type":2767,"score":3968},[6451,6453,6455,6457,6459,6460,6462,6463],{"type":2771,"url":6452},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g867-7843-wf8q",{"type":2774,"url":6454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59935",{"type":2771,"url":6456},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3892",{"type":2771,"url":6458},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F5a33a46416aa1ae6c025ff90a3cca57631fdafd2",{"type":2781,"url":2782},{"type":2771,"url":6461},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.14.2",{"type":2781,"url":2786},{"type":2774,"url":6464},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g867-7843-wf8q",[2790],{"id":236,"slug":6467,"dossier":45,"summary":6468,"aliases":6469,"sourceIds":6472,"published":6473,"modified":6474,"checkedAt":7,"severity":6475,"references":6477,"versionKeys":6490,"packageCount":32,"repositoryCount":32},"ghsa-g9xf-7f8q-9mcj-1d6967a3","pypdf: Possible infinite loop when processing threads\u002Farticles in writer",[6470,6471],"CVE-2026-54651","PYSEC-2026-3018",[236,6471],"2026-07-09T21:09:53Z","2026-07-13T16:42:31.458290509Z",[6476],{"type":2767,"score":3796},[6478,6480,6482,6484,6485,6487,6488],{"type":2771,"url":6479},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",{"type":2774,"url":6481},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54651",{"type":2771,"url":6483},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3839",{"type":2781,"url":2782},{"type":2771,"url":6486},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.1",{"type":2781,"url":2786},{"type":2774,"url":6489},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g9xf-7f8q-9mcj",[2790],{"id":237,"slug":6492,"dossier":89,"summary":6493,"aliases":6494,"sourceIds":6497,"published":6498,"modified":6499,"checkedAt":7,"severity":6500,"references":6505,"versionKeys":6515,"packageCount":32,"repositoryCount":6518},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[6495,6496],"CVE-2026-25645","PYSEC-2026-2275",[237,6496],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[6501,6503],{"type":2764,"score":6502},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2764,"score":6504},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[6506,6508,6510,6512,6513],{"type":2774,"url":6507},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2774,"url":6509},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2809,"url":6511},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2781,"url":5430},{"type":2774,"url":6514},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[5440,5441,6516,6517],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":238,"slug":6520,"dossier":45,"summary":6521,"aliases":6522,"sourceIds":6525,"published":6526,"modified":6527,"checkedAt":7,"severity":6528,"references":6531,"versionKeys":6541,"packageCount":32,"repositoryCount":663},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[6523,6524],"CVE-2026-33230","PYSEC-2026-2235",[238,6524],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[6529],{"type":2764,"score":6530},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[6532,6534,6536,6538,6540],{"type":2846,"url":6533},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":2774,"url":6535},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":2809,"url":6537},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":2809,"url":6539},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":2781,"url":3432},[3446,3447],{"id":239,"slug":6543,"dossier":89,"summary":6544,"aliases":6545,"sourceIds":6548,"published":6549,"modified":6550,"checkedAt":7,"severity":6551,"references":6553,"versionKeys":6564,"packageCount":32,"repositoryCount":101},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[6546,6547],"CVE-2025-66418","PYSEC-2026-1998",[239,6547],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[6552],{"type":2767,"score":3068},[6554,6556,6558,6560,6561,6562],{"type":2771,"url":6555},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2774,"url":6557},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2809,"url":6559},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2781,"url":3077},{"type":2781,"url":3079},{"type":2774,"url":6563},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[3083,3084,3085,3086,3087],{"id":240,"slug":6566,"dossier":45,"summary":6567,"aliases":6568,"sourceIds":6571,"published":6572,"modified":6573,"checkedAt":7,"severity":6574,"references":6576,"versionKeys":6589,"packageCount":32,"repositoryCount":682},"ghsa-gm8q-m8mv-jj5m-f488c667","Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write",[6569,6570],"CVE-2025-64712","PYSEC-2026-558",[240,6570],"2026-02-03T17:43:56Z","2026-07-13T16:15:34.752594062Z",[6575],{"type":2764,"score":3724},[6577,6579,6581,6583,6585,6587],{"type":2771,"url":6578},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fsecurity\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",{"type":2774,"url":6580},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64712",{"type":2771,"url":6582},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured\u002Fcommit\u002Fb01d35b2373fd087d2e15162b9c021663c97155d",{"type":2781,"url":6584},"https:\u002F\u002Fgithub.com\u002FUnstructured-IO\u002Funstructured",{"type":2781,"url":6586},"https:\u002F\u002Fpypi.org\u002Fproject\u002Funstructured",{"type":2774,"url":6588},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm8q-m8mv-jj5m",[6590,6591],"pypi:unstructured@0.16.12","pypi:unstructured@0.17.2",{"id":241,"slug":6593,"dossier":45,"summary":6594,"aliases":6595,"sourceIds":6598,"published":6599,"modified":6600,"checkedAt":7,"severity":6601,"references":6604,"versionKeys":6619,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[6596,6597],"CVE-2024-56201","PYSEC-2026-1472",[241,6597],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[6602,6603],{"type":2764,"score":4132},{"type":2767,"score":5814},[6605,6607,6609,6611,6613,6614,6616,6617],{"type":2771,"url":6606},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2774,"url":6608},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2771,"url":6610},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2809,"url":6612},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2781,"url":5823},{"type":2771,"url":6615},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2781,"url":5829},{"type":2774,"url":6618},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5833],{"id":242,"slug":6621,"dossier":89,"summary":6622,"aliases":6623,"sourceIds":6627,"published":6628,"modified":6629,"checkedAt":7,"severity":6630,"references":6633,"versionKeys":6645,"packageCount":32,"repositoryCount":6653},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[6624,6625,6626],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[242,6626],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[6631],{"type":2764,"score":6632},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[6634,6636,6638,6640,6642,6643],{"type":2846,"url":6635},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2774,"url":6637},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2809,"url":6639},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2771,"url":6641},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2781,"url":4145},{"type":2774,"url":6644},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[4151,4152,4153,6646,6647,6648,6649,6650,6651,6652],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":243,"slug":6655,"dossier":45,"summary":6656,"aliases":6657,"sourceIds":6658,"published":6659,"modified":6660,"checkedAt":7,"severity":6661,"references":6662,"versionKeys":6668,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[243],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[6663,6665,6666],{"type":2771,"url":6664},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2781,"url":3824},{"type":2771,"url":6667},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3828],{"id":244,"slug":6670,"dossier":45,"summary":6671,"aliases":6672,"sourceIds":6675,"published":6676,"modified":6677,"checkedAt":7,"severity":6678,"references":6680,"versionKeys":6701,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[6673,6674],"CVE-2024-34064","PYSEC-2026-1474",[244,6674],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[6679],{"type":2764,"score":4794},[6681,6683,6685,6687,6688,6690,6692,6694,6696,6698,6699],{"type":2771,"url":6682},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2774,"url":6684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2809,"url":6686},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2781,"url":5823},{"type":2771,"url":6689},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2771,"url":6691},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2771,"url":6693},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2771,"url":6695},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2771,"url":6697},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2781,"url":5829},{"type":2774,"url":6700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5833],{"id":245,"slug":6703,"dossier":45,"summary":6704,"aliases":6705,"sourceIds":6708,"published":6709,"modified":6710,"checkedAt":7,"severity":6711,"references":6714,"versionKeys":6728,"packageCount":32,"repositoryCount":663},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[6706,6707],"CVE-2026-0846","PYSEC-2026-97",[245,6707],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[6712,6713],{"type":2764,"score":4456},{"type":2764,"score":3279},[6715,6717,6719,6721,6722,6724,6726],{"type":2774,"url":6716},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":2771,"url":6718},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":2771,"url":6720},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":2781,"url":3432},{"type":2771,"url":6723},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":2846,"url":6725},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":2774,"url":6727},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[3446,3447],{"id":246,"slug":6730,"dossier":45,"summary":6731,"aliases":6732,"sourceIds":6735,"published":6736,"modified":6737,"checkedAt":7,"severity":6738,"references":6741,"versionKeys":6750,"packageCount":32,"repositoryCount":574},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[6733,6734],"CVE-2026-34513","PYSEC-2026-2095",[246,6734],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[6739,6740],{"type":2767,"score":3310},{"type":2764,"score":2904},[6742,6744,6746,6748,6749],{"type":2809,"url":6743},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2774,"url":6745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2809,"url":6747},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":247,"slug":6752,"dossier":45,"summary":6753,"aliases":6754,"sourceIds":6757,"published":6758,"modified":6759,"checkedAt":7,"severity":6760,"references":6764,"versionKeys":6772,"packageCount":32,"repositoryCount":574},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[6755,6756],"CVE-2026-47265","PYSEC-2026-2105",[247,6756],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[6761,6763],{"type":2767,"score":6762},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2764,"score":3279},[6765,6767,6769,6771],{"type":2809,"url":6766},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2774,"url":6768},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2809,"url":6770},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":248,"slug":6774,"dossier":45,"summary":6775,"aliases":6776,"sourceIds":6779,"published":6780,"modified":6781,"checkedAt":7,"severity":6782,"references":6784,"versionKeys":6793,"packageCount":32,"repositoryCount":594},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[6777,6778],"CVE-2026-59886","PYSEC-2026-3457",[248,6778],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[6783],{"type":2764,"score":2904},[6785,6787,6789,6791,6792],{"type":2774,"url":6786},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":2774,"url":6788},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":2809,"url":6790},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":2781,"url":4370},{"type":2774,"url":5228},[4378,5230],{"id":249,"slug":6795,"dossier":45,"summary":6796,"aliases":6797,"sourceIds":6800,"published":6801,"modified":6802,"checkedAt":7,"severity":6803,"references":6808,"versionKeys":6823,"packageCount":32,"repositoryCount":682},"ghsa-hp6r-r9vc-q8wx-ba7ba143","FastAPI SSP is vulnerable to Cross-site Request Forgery (CSRF) through improper OAuth parameter validation",[6798,6799],"CVE-2025-14546","PYSEC-2026-1362",[249,6799],"2025-12-19T06:30:27Z","2026-07-07T17:56:29.184155368Z",[6804,6806],{"type":2764,"score":6805},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",{"type":2767,"score":6807},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6809,6811,6813,6815,6817,6819,6821],{"type":2774,"url":6810},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14546",{"type":2771,"url":6812},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fissues\u002F266",{"type":2771,"url":6814},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso\u002Fcommit\u002F6117d1a5ad498ba57d671e8a059ebe20db5abe02",{"type":2781,"url":6816},"https:\u002F\u002Fgithub.com\u002Ftomasvotava\u002Ffastapi-sso",{"type":2771,"url":6818},"https:\u002F\u002Fsecurity.snyk.io\u002Fvuln\u002FSNYK-PYTHON-FASTAPISSO-14386403",{"type":2781,"url":6820},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffastapi-sso",{"type":2774,"url":6822},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hp6r-r9vc-q8wx",[6824,6825],"pypi:fastapi-sso@0.10.0","pypi:fastapi-sso@0.16.0",{"id":250,"slug":6827,"dossier":45,"summary":6828,"aliases":6829,"sourceIds":6832,"published":6833,"modified":6834,"checkedAt":7,"severity":6835,"references":6839,"versionKeys":6845,"packageCount":32,"repositoryCount":574},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[6830,6831],"CVE-2026-54276","PYSEC-2026-2109",[250,6831],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[6836,6838],{"type":2767,"score":6837},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2764,"score":6530},[6840,6842,6844],{"type":2774,"url":6841},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2809,"url":6843},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":251,"slug":6847,"dossier":45,"summary":6848,"aliases":6849,"sourceIds":6852,"published":6853,"modified":6854,"checkedAt":7,"severity":6855,"references":6857,"versionKeys":6872,"packageCount":32,"repositoryCount":32},"ghsa-hqmh-ppp3-xvm7-c347f679","pypdf: manipulated stream length values can exhaust RAM",[6850,6851],"CVE-2026-31826","PYSEC-2026-3019",[251,6851],"2026-03-11T00:14:02Z","2026-07-13T16:43:52.358788786Z",[6856],{"type":2767,"score":3584},[6858,6860,6862,6864,6866,6867,6869,6870],{"type":2771,"url":6859},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",{"type":2774,"url":6861},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31826",{"type":2771,"url":6863},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3675",{"type":2771,"url":6865},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F3c550b3196adeba1506a26e57c09c09fac75e9aa",{"type":2781,"url":2782},{"type":2771,"url":6868},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.8.0",{"type":2781,"url":2786},{"type":2774,"url":6871},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqmh-ppp3-xvm7",[2790],{"id":252,"slug":6874,"dossier":45,"summary":6875,"aliases":6876,"sourceIds":6879,"published":6880,"modified":6881,"checkedAt":7,"severity":6882,"references":6887,"versionKeys":6897,"packageCount":32,"repositoryCount":32},"ghsa-hqmj-h5c6-369m-5a4fc63e","ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack",[6877,6878],"CVE-2026-28500","PYSEC-2026-103",[252,6878],"2026-03-16T16:23:28Z","2026-06-08T18:45:17.801162264Z",[6883,6885],{"type":2764,"score":6884},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",{"type":2764,"score":6886},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[6888,6890,6892,6894,6895],{"type":2774,"url":6889},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-hqmj-h5c6-369m",{"type":2774,"url":6891},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28500",{"type":2809,"url":6893},"https:\u002F\u002Fgithub.com\u002FZeroXJacks\u002FCVEs\u002Fblob\u002Fmain\u002F2026\u002FCVE-2026-28500.md",{"type":2781,"url":3288},{"type":2771,"url":6896},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fonnx\u002FPYSEC-2026-103.yaml",[3298],{"id":253,"slug":6899,"dossier":45,"summary":6900,"aliases":6901,"sourceIds":6904,"published":6905,"modified":6906,"checkedAt":7,"severity":6907,"references":6910,"versionKeys":6924,"packageCount":32,"repositoryCount":32},"ghsa-hwpq-hmq9-wj77-25fc26b7","ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)",[6902,6903],"CVE-2026-44512","PYSEC-2026-2689",[253,6903],"2026-07-07T13:02:10Z","2026-07-16T23:59:26.167399764Z",[6908],{"type":2764,"score":6909},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[6911,6913,6915,6916,6918,6920,6922],{"type":2771,"url":6912},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-hwpq-hmq9-wj77",{"type":2771,"url":6914},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7916",{"type":2781,"url":3288},{"type":2771,"url":6917},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Freleases\u002Ftag\u002Fv1.22.0",{"type":2781,"url":6919},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fonnx",{"type":2774,"url":6921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hwpq-hmq9-wj77",{"type":2774,"url":6923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44512",[3298],{"id":254,"slug":6926,"dossier":45,"summary":6927,"aliases":6928,"sourceIds":6931,"published":6932,"modified":6933,"checkedAt":7,"severity":6934,"references":6938,"versionKeys":6955,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[6929,6930],"CVE-2025-67221","PYSEC-2026-107",[254,6930],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[6935,6937],{"type":2767,"score":6936},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2764,"score":2904},[6939,6941,6943,6945,6947,6949,6951,6953],{"type":2774,"url":6940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":2771,"url":6942},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":2771,"url":6944},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":2771,"url":6946},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":2781,"url":6948},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":2846,"url":6950},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":2771,"url":6952},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":2774,"url":6954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[6956,6957,6958,6959],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":255,"slug":6961,"dossier":45,"summary":6962,"aliases":6963,"sourceIds":6966,"published":6967,"modified":6968,"checkedAt":7,"severity":6969,"references":6973,"versionKeys":6989,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[6964,6965],"CVE-2024-11394","PYSEC-2024-229",[255,6965],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[6970,6972],{"type":2764,"score":6971},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2764,"score":5941},[6974,6976,6978,6980,6981,6983,6985,6987],{"type":2774,"url":6975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2771,"url":6977},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2771,"url":6979},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2781,"url":2844},{"type":2771,"url":6982},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2771,"url":6984},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2774,"url":6986},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2774,"url":6988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2851],{"id":256,"slug":6991,"dossier":45,"summary":6992,"aliases":6993,"sourceIds":6997,"published":6998,"modified":6999,"checkedAt":7,"severity":7000,"references":7004,"versionKeys":7021,"packageCount":32,"repositoryCount":32},"ghsa-j225-cvw7-qrx7-11bb0227","PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption",[6994,6995,6996],"CVE-2023-52323","PYSEC-2024-3","PYSEC-2026-1811",[256,6996],"2024-01-05T06:30:19Z","2026-07-07T17:56:21.566071405Z",[7001,7002],{"type":2764,"score":3459},{"type":2767,"score":7003},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7005,7007,7009,7011,7013,7015,7017,7019],{"type":2774,"url":7006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-52323",{"type":2771,"url":7008},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fcommit\u002F0deea1bfe1489e8c80d2053bbb06a1aa0b181ebd",{"type":2781,"url":7010},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome",{"type":2771,"url":7012},"https:\u002F\u002Fgithub.com\u002FLegrandin\u002Fpycryptodome\u002Fblob\u002Fmaster\u002FChangelog.rst",{"type":2771,"url":7014},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpycryptodomex\u002FPYSEC-2024-3.yaml",{"type":2771,"url":7016},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodomex\u002F#history",{"type":2781,"url":7018},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpycryptodome",{"type":2774,"url":7020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j225-cvw7-qrx7",[7022],"pypi:pycryptodome@3.10.1",{"id":257,"slug":7024,"dossier":45,"summary":7025,"aliases":7026,"sourceIds":7029,"published":7030,"modified":7031,"checkedAt":7,"severity":7032,"references":7034,"versionKeys":7046,"packageCount":32,"repositoryCount":32},"ghsa-j543-4vmf-qm7v-f9f33226","pypdf: Possible large memory usage for form XObjects during text extraction",[7027,7028],"CVE-2026-49461","PYSEC-2026-3020",[257,7028],"2026-06-16T13:47:08Z","2026-07-13T16:43:16.995390006Z",[7033],{"type":2767,"score":3796},[7035,7037,7039,7040,7041,7042,7044],{"type":2771,"url":7036},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":2771,"url":7038},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3805",{"type":2781,"url":2782},{"type":2771,"url":4057},{"type":2781,"url":2786},{"type":2774,"url":7043},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-j543-4vmf-qm7v",{"type":2774,"url":7045},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49461",[2790],{"id":258,"slug":7048,"dossier":45,"summary":7049,"aliases":7050,"sourceIds":7053,"published":7054,"modified":7055,"checkedAt":7,"severity":7056,"references":7058,"versionKeys":7073,"packageCount":32,"repositoryCount":32},"ghsa-jfx9-29x2-rv3j-dcd6f117","pypdf can exhaust RAM via manipulated LZWDecode streams",[7051,7052],"CVE-2025-62708","PYSEC-2026-1831",[258,7052],"2025-10-22T19:40:50Z","2026-07-07T17:56:05.697066629Z",[7057],{"type":2767,"score":3512},[7059,7061,7063,7065,7067,7068,7070,7071],{"type":2771,"url":7060},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",{"type":2774,"url":7062},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62708",{"type":2771,"url":7064},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3502",{"type":2771,"url":7066},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Fe51d07807ffcdaf18077b9486dadb3dc05b368da",{"type":2781,"url":2782},{"type":2771,"url":7069},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.1.3",{"type":2781,"url":2786},{"type":2774,"url":7072},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jfx9-29x2-rv3j",[2790],{"id":259,"slug":7075,"dossier":45,"summary":7076,"aliases":7077,"sourceIds":7080,"published":7081,"modified":7082,"checkedAt":7,"severity":7083,"references":7087,"versionKeys":7104,"packageCount":32,"repositoryCount":574},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[7078,7079],"CVE-2026-34993","PYSEC-2026-2104",[259,7079],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[7084,7086],{"type":2764,"score":7085},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2764,"score":3099},[7088,7090,7092,7094,7095,7097,7099,7100,7101,7102],{"type":2809,"url":7089},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2774,"url":7091},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2809,"url":7093},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2781,"url":2909},{"type":2771,"url":7096},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2771,"url":7098},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2774,"url":3294},{"type":2774,"url":6114},{"type":2774,"url":3442},{"type":3136,"url":7103},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2913,2914,2915,2916,2917,2918,2919,2920],{"id":260,"slug":7106,"dossier":45,"summary":7107,"aliases":7108,"sourceIds":7111,"published":7112,"modified":7113,"checkedAt":7,"severity":7114,"references":7116,"versionKeys":7126,"packageCount":32,"repositoryCount":632},"ghsa-jhmp-mqwm-3gq8-3b1c10a9","Tornado: Quadratic DoS via Crafted Multipart Parameters",[7109,7110],"CVE-2025-67726","PYSEC-2025-267",[260,7110],"2025-12-12T07:15:44.920Z","2026-07-20T19:15:27.583657512Z",[7115],{"type":2764,"score":2904},[7117,7119,7121,7122,7124,7125],{"type":2774,"url":7118},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-jhmp-mqwm-3gq8",{"type":2774,"url":7120},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67726",{"type":2809,"url":5696},{"type":2771,"url":7123},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-267.yaml",{"type":2781,"url":3338},{"type":2774,"url":5701},[3346,3347,3348],{"id":261,"slug":7128,"dossier":45,"summary":7129,"aliases":7130,"sourceIds":7133,"published":7134,"modified":7135,"checkedAt":7,"severity":7136,"references":7138,"versionKeys":7149,"packageCount":32,"repositoryCount":613},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[7131,7132],"CVE-2025-69227","PYSEC-2026-1107",[261,7132],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[7137],{"type":2767,"score":3512},[7139,7141,7143,7145,7146,7147],{"type":2771,"url":7140},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2774,"url":7142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2771,"url":7144},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":7148},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2913,2914,2915,2916,2917,2918,2919],{"id":262,"slug":7151,"dossier":45,"summary":7152,"aliases":7153,"sourceIds":7156,"published":7157,"modified":7158,"checkedAt":7,"severity":7159,"references":7162,"versionKeys":7177,"packageCount":32,"repositoryCount":32},"ghsa-jj6c-8h6c-hppx-b7b56d5e","pypdf has long runtimes for wrong size values in cross-reference and object streams",[7154,7155],"CVE-2026-41168","PYSEC-2026-3021",[262,7155],"2026-04-15T19:43:09Z","2026-07-13T16:43:07.020121646Z",[7160,7161],{"type":2764,"score":2869},{"type":2767,"score":5767},[7163,7165,7167,7169,7171,7172,7174,7175],{"type":2771,"url":7164},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",{"type":2774,"url":7166},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41168",{"type":2771,"url":7168},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3733",{"type":2771,"url":7170},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F62338e9d36419cf193ccec7331784f45df1d70b3",{"type":2781,"url":2782},{"type":2771,"url":7173},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.10.1",{"type":2781,"url":2786},{"type":2774,"url":7176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj6c-8h6c-hppx",[2790],{"id":263,"slug":7179,"dossier":45,"summary":7180,"aliases":7181,"sourceIds":7184,"published":7185,"modified":7186,"checkedAt":7,"severity":7187,"references":7190,"versionKeys":7199,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[7182,7183],"CVE-2026-35030","PYSEC-2026-390",[263,7183],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[7188],{"type":2767,"score":7189},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[7191,7193,7195,7196,7197],{"type":2771,"url":7192},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2774,"url":7194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2781,"url":3541},{"type":2781,"url":3545},{"type":2774,"url":7198},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[3549,3550,3551,3552],{"id":264,"slug":7201,"dossier":89,"summary":7202,"aliases":7203,"sourceIds":7207,"published":7208,"modified":7209,"checkedAt":7,"severity":7210,"references":7212,"versionKeys":7226,"packageCount":32,"repositoryCount":101},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[7204,7205,7206],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[264,7206],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[7211],{"type":2764,"score":2904},[7213,7215,7217,7219,7221,7222,7223,7224],{"type":2771,"url":7214},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2774,"url":7216},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2771,"url":7218},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2771,"url":7220},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2781,"url":3400},{"type":2771,"url":4273},{"type":2781,"url":4275},{"type":2774,"url":7225},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":265,"slug":7228,"dossier":45,"summary":7229,"aliases":7230,"sourceIds":7233,"published":7234,"modified":7235,"checkedAt":7,"severity":7236,"references":7238,"versionKeys":7251,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[7231,7232],"CVE-2025-3264","PYSEC-2026-1985",[265,7232],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[7237],{"type":2764,"score":3645},[7239,7241,7243,7245,7246,7248,7249],{"type":2774,"url":7240},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2771,"url":7242},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2771,"url":7244},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2781,"url":2844},{"type":2771,"url":7247},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2781,"url":3180},{"type":2774,"url":7250},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2851],{"id":266,"slug":7253,"dossier":45,"summary":7254,"aliases":7255,"sourceIds":7258,"published":7259,"modified":7260,"checkedAt":7,"severity":7261,"references":7263,"versionKeys":7280,"packageCount":32,"repositoryCount":663},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[7256,7257],"CVE-2026-33231","PYSEC-2026-2236",[266,7257],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[7262],{"type":2764,"score":2904},[7264,7266,7268,7270,7271,7273,7275,7276,7277,7278],{"type":2846,"url":7265},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":2774,"url":7267},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":2809,"url":7269},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":2781,"url":3432},{"type":2771,"url":7272},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":2771,"url":7274},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":2774,"url":3440},{"type":2774,"url":3294},{"type":2774,"url":3442},{"type":3136,"url":7279},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[3446,3447],{"id":267,"slug":7282,"dossier":45,"summary":7283,"aliases":7284,"sourceIds":7286,"published":7287,"modified":7288,"checkedAt":7,"severity":7289,"references":7291,"versionKeys":7299,"packageCount":32,"repositoryCount":32},"ghsa-jm82-fx9c-mx94-7c7a70d5","pypdf: Missing stream length values ignore defined limits",[7285],"CVE-2026-57204",[267],"2026-06-18T14:28:49Z","2026-07-08T08:27:12.200342088Z",[7290],{"type":2767,"score":3796},[7292,7294,7296,7297],{"type":2771,"url":7293},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-jm82-fx9c-mx94",{"type":2771,"url":7295},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3871",{"type":2781,"url":2782},{"type":2771,"url":7298},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.13.3",[2790],{"id":268,"slug":7301,"dossier":45,"summary":7302,"aliases":7303,"sourceIds":7306,"published":7307,"modified":7308,"checkedAt":7,"severity":7309,"references":7312,"versionKeys":7320,"packageCount":32,"repositoryCount":594},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[7304,7305],"CVE-2026-54282","PYSEC-2026-248",[268,7305],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[7310,7311],{"type":2764,"score":4590},{"type":2764,"score":3019},[7313,7315,7317,7318],{"type":2774,"url":7314},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2774,"url":7316},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2781,"url":4886},{"type":2771,"url":7319},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2888,2889,2890,4893,4894,5035,5036],{"id":269,"slug":7322,"dossier":45,"summary":7323,"aliases":7324,"sourceIds":7327,"published":7328,"modified":7329,"checkedAt":7,"severity":7330,"references":7333,"versionKeys":7341,"packageCount":32,"repositoryCount":682},"ghsa-jq35-7prp-9v3f-75660907","PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` \u002F `PyJWKClient` keys",[7325,7326],"CVE-2026-48523","PYSEC-2026-176",[269,7326],"2026-05-28T16:16:29.280Z","2026-06-16T15:44:20.868973576Z",[7331],{"type":2764,"score":7332},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[7334,7336,7338,7339],{"type":2846,"url":7335},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-jq35-7prp-9v3f",{"type":2774,"url":7337},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48523",{"type":2781,"url":4743},{"type":2771,"url":7340},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-176.yaml",[4749,4750],{"id":270,"slug":7343,"dossier":45,"summary":7344,"aliases":7345,"sourceIds":7348,"published":7349,"modified":7350,"checkedAt":7,"severity":7351,"references":7354,"versionKeys":7387,"packageCount":32,"repositoryCount":613},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[7346,7347],"CVE-2026-30922","PYSEC-2026-2263",[270,7347],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[7352,7353],{"type":2764,"score":6143},{"type":2764,"score":2904},[7355,7357,7359,7361,7363,7364,7366,7368,7370,7372,7373,7375,7377,7379,7381,7383,7385],{"type":2846,"url":7356},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2774,"url":7358},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2771,"url":7360},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2809,"url":7362},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2771,"url":3438},{"type":2771,"url":7365},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":2771,"url":7367},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":2771,"url":7369},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2771,"url":7371},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2771,"url":3442},{"type":2771,"url":7374},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":2771,"url":7376},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2771,"url":7378},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2771,"url":7380},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2771,"url":7382},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2771,"url":7384},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":2771,"url":7386},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[4378],{"id":271,"slug":7389,"dossier":45,"summary":7390,"aliases":7391,"sourceIds":7394,"published":7395,"modified":7396,"checkedAt":7,"severity":7397,"references":7399,"versionKeys":7412,"packageCount":32,"repositoryCount":594},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[7392,7393],"CVE-2026-69249","PYSEC-2026-3553",[271,7393],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[7398],{"type":2767,"score":3968},[7400,7402,7404,7406,7407,7408,7410],{"type":2771,"url":7401},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2771,"url":7403},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2771,"url":7405},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2781,"url":3824},{"type":2781,"url":4835},{"type":2774,"url":7409},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2774,"url":7411},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[3828,3829,3830,3831,3832,3833,6379],{"id":272,"slug":7414,"dossier":45,"summary":7415,"aliases":7416,"sourceIds":7419,"published":7420,"modified":7421,"checkedAt":7,"severity":7422,"references":7425,"versionKeys":7438,"packageCount":32,"repositoryCount":594},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[7417,7418],"CVE-2026-69248","PYSEC-2026-3554",[272,7418],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[7423],{"type":2767,"score":7424},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7426,7428,7430,7432,7433,7434,7436],{"type":2771,"url":7427},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2771,"url":7429},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2771,"url":7431},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2781,"url":3824},{"type":2781,"url":4835},{"type":2774,"url":7435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2774,"url":7437},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[3828,3829,3830,3831,3832,3833,6379],{"id":273,"slug":7440,"dossier":45,"summary":7441,"aliases":7442,"sourceIds":7445,"published":7446,"modified":7447,"checkedAt":7,"severity":7448,"references":7450,"versionKeys":7461,"packageCount":32,"repositoryCount":32},"ghsa-m2v9-299j-rv96-e4973cc9","pypdf: Possible infinite loop when processing outlines\u002Fbookmarks in writer",[7443,7444],"CVE-2026-54531","PYSEC-2026-3022",[273,7444],"2026-06-16T14:05:57Z","2026-07-13T16:43:49.403109632Z",[7449],{"type":2767,"score":3796},[7451,7453,7454,7455,7456,7457,7459],{"type":2771,"url":7452},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":2771,"url":3801},{"type":2781,"url":2782},{"type":2771,"url":3804},{"type":2781,"url":2786},{"type":2774,"url":7458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2v9-299j-rv96",{"type":2774,"url":7460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54531",[2790],{"id":274,"slug":7463,"dossier":45,"summary":7464,"aliases":7465,"sourceIds":7468,"published":7469,"modified":7470,"checkedAt":7,"severity":7471,"references":7473,"versionKeys":7489,"packageCount":32,"repositoryCount":32},"ghsa-m449-cwjh-6pw7-1a7936bf","pypdf's LZWDecode streams be manipulated to exhaust RAM",[7466,7467],"CVE-2025-66019","PYSEC-2026-1832",[274,7467],"2025-11-24T22:42:07Z","2026-07-07T17:56:14.246224195Z",[7472],{"type":2767,"score":3512},[7474,7475,7477,7479,7481,7483,7484,7486,7487],{"type":2771,"url":7060},{"type":2771,"url":7476},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",{"type":2774,"url":7478},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66019",{"type":2771,"url":7480},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F96186725e5e6f237129a58a97cd19204a9ce40b2",{"type":2771,"url":7482},"https:\u002F\u002Faydinnyunus.github.io\u002F2025\u002F12\u002F20\u002Fcve-2025-66019-pypdf-lzw-dos",{"type":2781,"url":2782},{"type":2771,"url":7485},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.4.0",{"type":2781,"url":2786},{"type":2774,"url":7488},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m449-cwjh-6pw7",[2790],{"id":275,"slug":7491,"dossier":45,"summary":7492,"aliases":7493,"sourceIds":7496,"published":7497,"modified":7498,"checkedAt":7,"severity":7499,"references":7501,"versionKeys":7512,"packageCount":32,"repositoryCount":594},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[7494,7495],"CVE-2026-59884","PYSEC-2026-3455",[275,7495],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[7500],{"type":2764,"score":2904},[7502,7504,7506,7508,7509,7510],{"type":2774,"url":7503},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":2774,"url":7505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":2809,"url":7507},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":2781,"url":4370},{"type":2774,"url":5228},{"type":2771,"url":7511},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[4378,5230],{"id":276,"slug":7514,"dossier":45,"summary":7515,"aliases":7516,"sourceIds":7519,"published":7520,"modified":7521,"checkedAt":7,"severity":7522,"references":7527,"versionKeys":7536,"packageCount":32,"repositoryCount":574},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[7517,7518],"CVE-2026-34516","PYSEC-2026-2098",[276,7518],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[7523,7524,7525],{"type":2764,"score":2904},{"type":2767,"score":3512},{"type":2767,"score":7526},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7528,7530,7532,7534,7535],{"type":2809,"url":7529},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2774,"url":7531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2809,"url":7533},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":277,"slug":7538,"dossier":45,"summary":7539,"aliases":7540,"sourceIds":7543,"published":7544,"modified":7545,"checkedAt":7,"severity":7546,"references":7549,"versionKeys":7555,"packageCount":32,"repositoryCount":574},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[7541,7542],"CVE-2026-50269","PYSEC-2026-2106",[277,7542],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[7547,7548],{"type":2767,"score":3017},{"type":2764,"score":2904},[7550,7552,7554],{"type":2774,"url":7551},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2809,"url":7553},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2781,"url":2909},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":278,"slug":7557,"dossier":45,"summary":7558,"aliases":7559,"sourceIds":7562,"published":7563,"modified":7564,"checkedAt":7,"severity":7565,"references":7569,"versionKeys":7577,"packageCount":32,"repositoryCount":613},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[7560,7561],"CVE-2026-34073","PYSEC-2026-35",[278,7561],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[7566,7567],{"type":2764,"score":3019},{"type":2767,"score":7568},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[7570,7572,7574,7575],{"type":2774,"url":7571},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2774,"url":7573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2781,"url":3824},{"type":2771,"url":7576},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3828,3829,3830,3831,3832,3833],{"id":279,"slug":7579,"dossier":45,"summary":7580,"aliases":7581,"sourceIds":7584,"published":7585,"modified":7586,"checkedAt":7,"severity":7587,"references":7590,"versionKeys":7598,"packageCount":32,"repositoryCount":663},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[7582,7583],"CVE-2026-44432","PYSEC-2026-142",[279,7583],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[7588,7589],{"type":2764,"score":2904},{"type":2767,"score":3068},[7591,7593,7595,7597],{"type":2774,"url":7592},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2774,"url":7594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2771,"url":7596},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2781,"url":3077},[7599],"pypi:urllib3@2.6.3",{"id":280,"slug":7601,"dossier":45,"summary":7602,"aliases":7603,"sourceIds":7606,"published":7607,"modified":7608,"checkedAt":7,"severity":7609,"references":7612,"versionKeys":7625,"packageCount":32,"repositoryCount":5904},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[7604,7605],"CVE-2026-28684","PYSEC-2026-2270",[280,7605],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[7610],{"type":2764,"score":7611},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7613,7615,7617,7619,7621,7623],{"type":2809,"url":7614},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2774,"url":7616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2809,"url":7618},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2771,"url":7620},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2781,"url":7622},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2774,"url":7624},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[7626,7627,7628,7629],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":281,"slug":7631,"dossier":45,"summary":7632,"aliases":7633,"sourceIds":7636,"published":7637,"modified":7638,"checkedAt":7,"severity":7639,"references":7642,"versionKeys":7657,"packageCount":32,"repositoryCount":5904},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[7634,7635],"CVE-2026-69243","PYSEC-2026-3546",[281,7635],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[7640],{"type":2767,"score":7641},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7643,7645,7647,7649,7650,7652,7653,7655],{"type":2771,"url":7644},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2771,"url":7646},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2771,"url":7648},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2781,"url":2909},{"type":2771,"url":7651},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2781,"url":3925},{"type":2774,"url":7654},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2774,"url":7656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2913,2914,2915,2916,2917,2918,2919,2920,5903],{"id":282,"slug":7659,"dossier":45,"summary":7660,"aliases":7661,"sourceIds":7664,"published":7665,"modified":7666,"checkedAt":7,"severity":7667,"references":7669,"versionKeys":7678,"packageCount":32,"repositoryCount":64},"ghsa-mgf9-4vpg-hj56-00729355","tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)",[7662,7663],"CVE-2026-49855","PYSEC-2026-3389",[282,7663],"2026-06-15T20:19:28Z","2026-07-13T16:43:27.241564365Z",[7668],{"type":2764,"score":2904},[7670,7672,7673,7674,7676],{"type":2771,"url":7671},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2781,"url":3338},{"type":2781,"url":3340},{"type":2774,"url":7675},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgf9-4vpg-hj56",{"type":2774,"url":7677},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49855",[3346,3347,3348,3349,3350],{"id":283,"slug":7680,"dossier":45,"summary":7681,"aliases":7682,"sourceIds":7685,"published":7686,"modified":7687,"checkedAt":7,"severity":7688,"references":7690,"versionKeys":7701,"packageCount":32,"repositoryCount":632},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[7683,7684],"CVE-2026-40347","PYSEC-2026-3038",[283,7684],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[7689],{"type":2764,"score":2869},[7691,7693,7695,7696,7698,7699],{"type":2771,"url":7692},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2774,"url":7694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2781,"url":3977},{"type":2771,"url":7697},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2781,"url":3979},{"type":2774,"url":7700},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[4175,4176,3983],{"id":284,"slug":7703,"dossier":45,"summary":7704,"aliases":7705,"sourceIds":7708,"published":7709,"modified":7710,"checkedAt":7,"severity":7711,"references":7713,"versionKeys":7726,"packageCount":32,"repositoryCount":5904},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[7706,7707],"CVE-2026-59881","PYSEC-2026-3547",[284,7707],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[7712],{"type":2767,"score":3222},[7714,7716,7718,7720,7722,7723,7724],{"type":2771,"url":7715},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2774,"url":7717},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2771,"url":7719},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2771,"url":7721},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":7725},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2913,2914,2915,2916,2917,2918,2919,2920,5903],{"id":285,"slug":7728,"dossier":45,"summary":7729,"aliases":7730,"sourceIds":7733,"published":7734,"modified":7735,"checkedAt":7,"severity":7736,"references":7738,"versionKeys":7749,"packageCount":32,"repositoryCount":613},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[7731,7732],"CVE-2025-69225","PYSEC-2026-1109",[285,7732],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[7737],{"type":2767,"score":3017},[7739,7741,7743,7745,7746,7747],{"type":2771,"url":7740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2774,"url":7742},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2809,"url":7744},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2781,"url":2909},{"type":2781,"url":3925},{"type":2774,"url":7748},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2913,2914,2915,2916,2917,2918,2919],{"id":286,"slug":7751,"dossier":45,"summary":7752,"aliases":7753,"sourceIds":7757,"published":7758,"modified":7759,"checkedAt":7,"severity":7760,"references":7763,"versionKeys":7796,"packageCount":32,"repositoryCount":682},"ghsa-mrfv-m5wm-5w6w-824b9281","libsodium has Incomplete List of Disallowed Inputs",[7754,7755,7756],"CVE-2025-69277","PYSEC-2026-1448","PYSEC-2026-3002",[286,7756],"2025-12-31T06:30:18Z","2026-07-13T16:43:23.604670369Z",[7761],{"type":2764,"score":7762},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[7764,7766,7768,7770,7772,7774,7776,7778,7780,7782,7784,7786,7788,7790,7792,7794],{"type":2774,"url":7765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69277",{"type":2771,"url":7767},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fissues\u002F920",{"type":2771,"url":7769},"https:\u002F\u002Fgithub.com\u002Fhdwallet-io\u002Fpython-hdwallet\u002Fpull\u002F124",{"type":2771,"url":7771},"https:\u002F\u002Fgithub.com\u002Fjedisct1\u002Flibsodium\u002Fcommit\u002Fad3004ec8731730e93fcfbbc824e67eadc1c1bae",{"type":2771,"url":7773},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F2cb48f26130919f92f30650bdcc30e6f4ebe45ac",{"type":2771,"url":7775},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat\u002Fcommit\u002F4714da6efdc782c06690bc72ce34fae7941c2d9f",{"type":2771,"url":7777},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002F96314884d88d1089ff5f336dba61d7abbcddbbf7",{"type":2771,"url":7779},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fpynacl\u002Fcommit\u002Fecf41f55a3d8f1e10ce89c61c4b4d67f3f4467cf",{"type":2771,"url":7781},"https:\u002F\u002F00f.net\u002F2025\u002F12\u002F30\u002Flibsodium-vulnerability",{"type":2771,"url":7783},"https:\u002F\u002Fgithub.com\u002FFriendsOfPHP\u002Fsecurity-advisories\u002Fblob\u002Fmaster\u002Fparagonie\u002Fsodium_compat\u002F2025-12-30.yaml",{"type":2781,"url":7785},"https:\u002F\u002Fgithub.com\u002Fparagonie\u002Fsodium_compat",{"type":2771,"url":7787},"https:\u002F\u002Fianix.com\u002Fpub\u002Fed25519-deployment.html",{"type":2771,"url":7789},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00004.html",{"type":2771,"url":7791},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=46435614",{"type":2781,"url":7793},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpynacl",{"type":2774,"url":7795},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrfv-m5wm-5w6w",[7797],"pypi:pynacl@1.5.0",{"id":287,"slug":7799,"dossier":45,"summary":7800,"aliases":7801,"sourceIds":7804,"published":7805,"modified":7806,"checkedAt":7,"severity":7807,"references":7810,"versionKeys":7819,"packageCount":32,"repositoryCount":574},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[7802,7803],"CVE-2026-34519","PYSEC-2026-2101",[287,7803],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[7808,7809],{"type":2767,"score":3017},{"type":2764,"score":3019},[7811,7813,7815,7817,7818],{"type":2809,"url":7812},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2774,"url":7814},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2809,"url":7816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":288,"slug":7821,"dossier":45,"summary":7822,"aliases":7823,"sourceIds":7826,"published":7827,"modified":7828,"checkedAt":7,"severity":7829,"references":7832,"versionKeys":7840,"packageCount":32,"repositoryCount":663},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[7824,7825],"CVE-2026-39892","PYSEC-2026-36",[288,7825],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[7830,7831],{"type":2767,"score":3222},{"type":2764,"score":3724},[7833,7835,7837,7838],{"type":2774,"url":7834},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2774,"url":7836},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2781,"url":3824},{"type":2771,"url":7839},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3832,3833],{"id":289,"slug":7842,"dossier":45,"summary":7843,"aliases":7844,"sourceIds":7847,"published":7848,"modified":7849,"checkedAt":7,"severity":7850,"references":7852,"versionKeys":7860,"packageCount":32,"repositoryCount":32},"ghsa-p433-9wv8-28xj-b2293c7c","ONNX: External Data Symlink Traversal",[7845,7846],"CVE-2026-34447","PYSEC-2026-104",[289,7846],"2026-04-01T18:16:30.810Z","2026-06-08T18:45:17.783158448Z",[7851],{"type":2764,"score":5794},[7853,7855,7857,7858],{"type":2846,"url":7854},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-p433-9wv8-28xj",{"type":2774,"url":7856},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34447",{"type":2781,"url":3288},{"type":2771,"url":7859},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fonnx\u002FPYSEC-2026-104.yaml",[3298],{"id":290,"slug":7862,"dossier":45,"summary":7863,"aliases":7864,"sourceIds":7867,"published":7868,"modified":7869,"checkedAt":7,"severity":7870,"references":7872,"versionKeys":7889,"packageCount":32,"repositoryCount":663},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[7865,7866],"CVE-2026-54293","PYSEC-2026-2078",[290,7866],"2026-06-16T14:34:15Z","2026-07-21T12:46:29.659855804Z",[7871],{"type":2764,"score":3279},[7873,7875,7877,7879,7880,7882,7884,7885,7887],{"type":2846,"url":7874},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":2774,"url":7876},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":2809,"url":7878},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":2771,"url":6117},{"type":2771,"url":7881},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":3136,"url":7883},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":2781,"url":3432},{"type":2771,"url":7886},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":2771,"url":7888},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[3446,3447],{"id":291,"slug":7891,"dossier":45,"summary":7892,"aliases":7893,"sourceIds":7896,"published":7897,"modified":7898,"checkedAt":7,"severity":7899,"references":7901,"versionKeys":7915,"packageCount":32,"repositoryCount":32},"ghsa-p893-rvq9-2xf9-4967db1d","ONNX: Heap-Buffer-Overflow READ in Gemm Version Converter Adapter via Undersized Input Shape",[7894,7895],"CVE-2026-63632","PYSEC-2026-3587",[291,7895],"2026-07-24T15:48:04Z","2026-08-04T14:41:07.048011214Z",[7900],{"type":2764,"score":2765},[7902,7904,7906,7908,7909,7910,7911,7913],{"type":2771,"url":7903},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-p893-rvq9-2xf9",{"type":2771,"url":7905},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7880",{"type":2771,"url":7907},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fcommit\u002Fe9c74f596eaa0250f89e52a54160a25bbcb25b66",{"type":2781,"url":3288},{"type":2771,"url":6917},{"type":2781,"url":6919},{"type":2774,"url":7912},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-p893-rvq9-2xf9",{"type":2774,"url":7914},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-63632",[3298],{"id":292,"slug":7917,"dossier":45,"summary":7918,"aliases":7919,"sourceIds":7922,"published":7923,"modified":7924,"checkedAt":7,"severity":7925,"references":7928,"versionKeys":7937,"packageCount":32,"repositoryCount":574},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[7920,7921],"CVE-2026-34515","PYSEC-2026-2097",[292,7921],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[7926,7927],{"type":2767,"score":6762},{"type":2764,"score":3279},[7929,7931,7933,7935,7936],{"type":2809,"url":7930},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2774,"url":7932},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2809,"url":7934},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":293,"slug":7939,"dossier":45,"summary":7940,"aliases":7941,"sourceIds":7945,"published":7946,"modified":7947,"checkedAt":7,"severity":7948,"references":7951,"versionKeys":7964,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[7942,7943,7944],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[293,7944],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[7949,7950],{"type":2764,"score":2869},{"type":2764,"score":2904},[7952,7954,7956,7958,7960,7962,7963],{"type":2846,"url":7953},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2774,"url":7955},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2809,"url":7957},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2809,"url":7959},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2771,"url":7961},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2781,"url":3400},{"type":2774,"url":4273},[3409,3410,3411],{"id":294,"slug":7966,"dossier":45,"summary":7967,"aliases":7968,"sourceIds":7971,"published":7234,"modified":7972,"checkedAt":7,"severity":7973,"references":7976,"versionKeys":7989,"packageCount":32,"repositoryCount":682},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[7969,7970],"CVE-2025-3777","PYSEC-2026-1986",[294,7970],"2026-07-07T17:56:47.225461188Z",[7974],{"type":2764,"score":7975},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[7977,7979,7981,7982,7984,7986,7987],{"type":2774,"url":7978},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2771,"url":7980},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2781,"url":2844},{"type":2771,"url":7983},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2771,"url":7985},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2781,"url":3180},{"type":2774,"url":7988},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2851,2852],{"id":295,"slug":7991,"dossier":89,"summary":7992,"aliases":7993,"sourceIds":7997,"published":7998,"modified":7999,"checkedAt":7,"severity":8000,"references":8002,"versionKeys":8013,"packageCount":32,"repositoryCount":101},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[7994,7995,7996],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[295,7996],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[8001],{"type":2764,"score":2904},[8003,8005,8007,8009,8011,8012],{"type":2846,"url":8004},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2774,"url":8006},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2809,"url":8008},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2771,"url":8010},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2781,"url":3400},{"type":2774,"url":3402},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":296,"slug":8015,"dossier":45,"summary":8016,"aliases":8017,"sourceIds":8020,"published":8021,"modified":8022,"checkedAt":7,"severity":8023,"references":8025,"versionKeys":8034,"packageCount":32,"repositoryCount":632},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[8018,8019],"CVE-2026-42561","PYSEC-2026-3039",[296,8019],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[8024],{"type":2764,"score":2904},[8026,8028,8030,8031,8032],{"type":2771,"url":8027},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2774,"url":8029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2781,"url":3977},{"type":2781,"url":3979},{"type":2774,"url":8033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[4175,4176,3983],{"id":297,"slug":8036,"dossier":45,"summary":8037,"aliases":8038,"sourceIds":8041,"published":8042,"modified":8043,"checkedAt":7,"severity":8044,"references":8046,"versionKeys":8058,"packageCount":32,"repositoryCount":613},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[8039,8040],"CVE-2025-50181","PYSEC-2026-1999",[297,8040],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[8045],{"type":2764,"score":3459},[8047,8049,8051,8053,8054,8055,8056],{"type":2771,"url":8048},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2774,"url":8050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2809,"url":8052},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2781,"url":3077},{"type":2771,"url":3469},{"type":2781,"url":3079},{"type":2774,"url":8057},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[3083,3084,3085,3086],{"id":298,"slug":8060,"dossier":45,"summary":8061,"aliases":8062,"sourceIds":8065,"published":8066,"modified":8067,"checkedAt":7,"severity":8068,"references":8071,"versionKeys":8082,"packageCount":32,"repositoryCount":632},"ghsa-pr2v-jx2c-wg9f-1ca6d67c","Tornado vulnerable to Header Injection and XSS via reason argument",[8063,8064],"CVE-2025-67724","PYSEC-2025-265",[298,8064],"2025-12-12T06:15:41.213Z","2026-07-20T19:00:24.953994999Z",[8069,8070],{"type":2764,"score":4794},{"type":2764,"score":6530},[8072,8074,8076,8078,8080,8081],{"type":2774,"url":8073},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pr2v-jx2c-wg9f",{"type":2774,"url":8075},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67724",{"type":2809,"url":8077},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F9c163aebeaad9e6e7d28bac1f33580eb00b0e421",{"type":2771,"url":8079},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2025-265.yaml",{"type":2781,"url":3338},{"type":2774,"url":5701},[3346,3347,3348],{"id":299,"slug":8084,"dossier":45,"summary":8085,"aliases":8086,"sourceIds":8087,"published":8088,"modified":8089,"checkedAt":7,"severity":8090,"references":8093,"versionKeys":8097,"packageCount":32,"repositoryCount":64},"ghsa-pw6j-qg29-8w7f-fb4d7ed6","Tornado: CurlAsyncHTTPClient leaks per-request credentials on handle reuse",[],[299],"2026-06-15T20:37:24Z","2026-06-16T22:59:25.768721886Z",[8091],{"type":2764,"score":8092},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8094,8096],{"type":2771,"url":8095},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-pw6j-qg29-8w7f",{"type":2781,"url":3338},[3346,3347,3348,3349,3350],{"id":300,"slug":8099,"dossier":89,"summary":8100,"aliases":8101,"sourceIds":8105,"published":8106,"modified":8107,"checkedAt":7,"severity":8108,"references":8111,"versionKeys":8123,"packageCount":32,"repositoryCount":101},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[8102,8103,8104],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[300,8104],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[8109,8110],{"type":2767,"score":5715},{"type":2764,"score":4505},[8112,8113,8115,8117,8119,8121,8122],{"type":2771,"url":5719},{"type":2809,"url":8114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2774,"url":8116},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2809,"url":8118},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2809,"url":8120},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2781,"url":3400},{"type":2774,"url":4247},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":301,"slug":8125,"dossier":45,"summary":8126,"aliases":8127,"sourceIds":8130,"published":7234,"modified":8131,"checkedAt":7,"severity":8132,"references":8134,"versionKeys":8145,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[8128,8129],"CVE-2025-3263","PYSEC-2026-1987",[301,8129],"2026-07-07T17:56:57.889099913Z",[8133],{"type":2764,"score":3645},[8135,8137,8138,8139,8140,8142,8143],{"type":2774,"url":8136},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2771,"url":7242},{"type":2771,"url":7244},{"type":2781,"url":2844},{"type":2771,"url":8141},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2781,"url":3180},{"type":2774,"url":8144},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2851],{"id":302,"slug":8147,"dossier":45,"summary":8148,"aliases":8149,"sourceIds":8152,"published":8153,"modified":8154,"checkedAt":7,"severity":8155,"references":8158,"versionKeys":8171,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[8150,8151],"CVE-2024-56326","PYSEC-2026-1475",[302,8151],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[8156,8157],{"type":2764,"score":5069},{"type":2767,"score":5814},[8159,8161,8163,8165,8166,8167,8168,8169],{"type":2771,"url":8160},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2774,"url":8162},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2809,"url":8164},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2781,"url":5823},{"type":2771,"url":6615},{"type":2771,"url":5825},{"type":2781,"url":5829},{"type":2774,"url":8170},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5833],{"id":303,"slug":8173,"dossier":45,"summary":8174,"aliases":8175,"sourceIds":8176,"published":8177,"modified":8178,"checkedAt":7,"severity":8179,"references":8182,"versionKeys":8186,"packageCount":32,"repositoryCount":32},"ghsa-q56x-g2fj-4rj6-34b89728","ONNX: TOCTOU arbitrary file read\u002Fwrite in save_external_dat",[],[303],"2026-04-01T23:40:58Z","2026-06-08T20:30:58.841136466Z",[8180],{"type":2764,"score":8181},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8183,8185],{"type":2771,"url":8184},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fsecurity\u002Fadvisories\u002FGHSA-q56x-g2fj-4rj6",{"type":2781,"url":3288},[3298],{"id":304,"slug":8188,"dossier":89,"summary":8189,"aliases":8190,"sourceIds":8193,"published":8194,"modified":8195,"checkedAt":7,"severity":8196,"references":8199,"versionKeys":8205,"packageCount":32,"repositoryCount":6518},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[8191,8192],"CVE-2026-44431","PYSEC-2026-141",[304,8192],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[8197,8198],{"type":2764,"score":5346},{"type":2767,"score":6364},[8200,8202,8204],{"type":2774,"url":8201},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2774,"url":8203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2781,"url":3077},[3083,3084,3085,3086,3087,7599],{"id":305,"slug":8207,"dossier":45,"summary":8208,"aliases":8209,"sourceIds":8213,"published":8214,"modified":8215,"checkedAt":7,"severity":8216,"references":8220,"versionKeys":8238,"packageCount":32,"repositoryCount":574},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[8210,8211,8212],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[305],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[8217,8218],{"type":2764,"score":6000},{"type":2767,"score":8219},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8221,8223,8225,8227,8229,8231,8232,8234,8236],{"type":2774,"url":8222},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2771,"url":8224},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2771,"url":8226},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2771,"url":8228},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2771,"url":8230},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2781,"url":3143},{"type":2771,"url":8233},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2771,"url":8235},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2771,"url":8237},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[3155,3156,3157,5206,5207,8239,8240,8241],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":306,"slug":8243,"dossier":45,"summary":8244,"aliases":8245,"sourceIds":8248,"published":8249,"modified":8250,"checkedAt":7,"severity":8251,"references":8254,"versionKeys":8267,"packageCount":32,"repositoryCount":64},"ghsa-qjxf-f2mg-c6mc-58d52008","Tornado is vulnerable to DoS due to too many multipart parts",[8246,8247],"CVE-2026-31958","PYSEC-2026-140",[306,8247],"2026-03-11T20:16:16.617Z","2026-06-08T20:00:14.385003861Z",[8252,8253],{"type":2764,"score":2904},{"type":2767,"score":3968},[8255,8257,8259,8261,8263,8264,8265],{"type":2774,"url":8256},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fsecurity\u002Fadvisories\u002FGHSA-qjxf-f2mg-c6mc",{"type":2774,"url":8258},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-31958",{"type":2771,"url":8260},"https:\u002F\u002Fgithub.com\u002Ftornadoweb\u002Ftornado\u002Fcommit\u002F119a195e290c43ad2d63a2cf012c29d43d6ed839",{"type":2771,"url":8262},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftornado\u002FPYSEC-2026-140.yaml",{"type":2781,"url":3338},{"type":2771,"url":4805},{"type":2771,"url":8266},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F04\u002Fmsg00000.html",[3346,3347,3348,3349],{"id":307,"slug":8269,"dossier":45,"summary":8270,"aliases":8271,"sourceIds":8274,"published":8275,"modified":8276,"checkedAt":7,"severity":8277,"references":8280,"versionKeys":8295,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[8272,8273],"CVE-2026-22701","PYSEC-2026-1374",[307,8273],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[8278],{"type":2764,"score":8279},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8281,8283,8285,8287,8289,8291,8293],{"type":2771,"url":8282},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2774,"url":8284},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2771,"url":8286},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2771,"url":8288},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2781,"url":8290},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2781,"url":8292},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2774,"url":8294},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[8296,8297,8298,8299],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":308,"slug":8301,"dossier":45,"summary":8302,"aliases":8303,"sourceIds":8306,"published":8307,"modified":8308,"checkedAt":7,"severity":8309,"references":8311,"versionKeys":8324,"packageCount":32,"repositoryCount":32},"ghsa-qpxp-75px-xjcp-68d210e7","pypdf has inefficient decoding of array-based streams",[8304,8305],"CVE-2026-33123","PYSEC-2026-3023",[308,8305],"2026-03-18T16:17:31Z","2026-07-13T16:43:25.259140299Z",[8310],{"type":2767,"score":2768},[8312,8314,8316,8318,8319,8321,8322],{"type":2771,"url":8313},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",{"type":2774,"url":8315},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33123",{"type":2771,"url":8317},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3686",{"type":2781,"url":2782},{"type":2771,"url":8320},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.9.1",{"type":2781,"url":2786},{"type":2774,"url":8323},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qpxp-75px-xjcp",[2790],{"id":309,"slug":8326,"dossier":45,"summary":8327,"aliases":8328,"sourceIds":8331,"published":8332,"modified":8333,"checkedAt":7,"severity":8334,"references":8337,"versionKeys":8351,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[8329,8330],"CVE-2025-2099","PYSEC-2025-40",[309,8330],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[8335,8336],{"type":2764,"score":3645},{"type":2764,"score":2904},[8338,8340,8342,8344,8345,8347,8349],{"type":2774,"url":8339},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2771,"url":8341},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2809,"url":8343},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2781,"url":2844},{"type":2771,"url":8346},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2771,"url":8348},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2774,"url":8350},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2851],{"id":310,"slug":8353,"dossier":45,"summary":8354,"aliases":8355,"sourceIds":8358,"published":8359,"modified":8360,"checkedAt":7,"severity":8361,"references":8365,"versionKeys":8388,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[8356,8357],"CVE-2026-47101","PYSEC-2026-2598",[310,8357],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[8362,8363],{"type":2764,"score":4132},{"type":2767,"score":8364},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[8366,8368,8370,8372,8374,8376,8377,8379,8381,8383,8385,8386],{"type":2774,"url":8367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2771,"url":8369},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2771,"url":8371},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2771,"url":8373},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2771,"url":8375},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2781,"url":3541},{"type":2771,"url":8378},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2771,"url":8380},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2771,"url":8382},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2771,"url":8384},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2781,"url":3545},{"type":2774,"url":8387},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[3549,3550,3551,3552],{"id":311,"slug":8390,"dossier":45,"summary":8391,"aliases":8392,"sourceIds":8395,"published":8396,"modified":8397,"checkedAt":7,"severity":8398,"references":8400,"versionKeys":8409,"packageCount":32,"repositoryCount":663},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[8393,8394],"CVE-2026-12075","PYSEC-2026-3583",[311,8394],"2026-07-31T16:51:29Z","2026-08-06T15:11:52.346921403Z",[8399],{"type":2764,"score":6884},[8401,8403,8404,8405,8407],{"type":2771,"url":8402},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":2781,"url":3432},{"type":2781,"url":4550},{"type":2774,"url":8406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":2774,"url":8408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[3446,3447],{"id":312,"slug":8411,"dossier":45,"summary":6962,"aliases":8412,"sourceIds":8415,"published":8416,"modified":8417,"checkedAt":7,"severity":8418,"references":8422,"versionKeys":8436,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[8413,8414],"CVE-2024-11392","PYSEC-2024-227",[312,8414],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[8419,8421],{"type":2764,"score":8420},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2764,"score":5941},[8423,8425,8426,8427,8428,8430,8432,8434],{"type":2774,"url":8424},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2771,"url":6977},{"type":2771,"url":6979},{"type":2781,"url":2844},{"type":2771,"url":8429},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2771,"url":8431},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2774,"url":8433},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2774,"url":8435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2851],{"id":313,"slug":8438,"dossier":45,"summary":8439,"aliases":8440,"sourceIds":8443,"published":8444,"modified":8445,"checkedAt":7,"severity":8446,"references":8451,"versionKeys":8489,"packageCount":32,"repositoryCount":613},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[8441,8442],"CVE-2026-26007","PYSEC-2026-2141",[313,8442],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[8447,8449],{"type":2767,"score":8448},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2764,"score":8450},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[8452,8454,8456,8458,8459,8461,8463,8465,8466,8468,8470,8472,8474,8476,8478,8480,8482,8484,8486,8488],{"type":2771,"url":8453},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2774,"url":8455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2771,"url":8457},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2781,"url":3824},{"type":2771,"url":8460},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2771,"url":8462},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2771,"url":8464},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2774,"url":3438},{"type":2774,"url":8467},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2774,"url":8469},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2774,"url":8471},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2774,"url":8473},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2774,"url":8475},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2774,"url":8477},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2774,"url":8479},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2774,"url":8481},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2774,"url":8483},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2774,"url":8485},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2774,"url":8487},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2774,"url":5754},[3828,3829,3830,3831,3832,3833],{"id":314,"slug":8491,"dossier":45,"summary":8492,"aliases":8493,"sourceIds":8497,"published":8498,"modified":8499,"checkedAt":7,"severity":8500,"references":8503,"versionKeys":8517,"packageCount":32,"repositoryCount":101},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[8494,8495,8496],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[314,8496],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[8501,8502],{"type":2764,"score":3131},{"type":2767,"score":2768},[8504,8506,8508,8510,8512,8513,8514,8515],{"type":2771,"url":8505},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2774,"url":8507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2771,"url":8509},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2771,"url":8511},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2781,"url":3400},{"type":2771,"url":4247},{"type":2781,"url":4275},{"type":2774,"url":8516},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":315,"slug":8519,"dossier":45,"summary":8520,"aliases":8521,"sourceIds":8524,"published":8525,"modified":8526,"checkedAt":7,"severity":8527,"references":8529,"versionKeys":8544,"packageCount":32,"repositoryCount":682},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[8522,8523],"CVE-2025-6051","PYSEC-2026-1988",[315,8523],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[8528],{"type":2764,"score":3645},[8530,8532,8534,8536,8538,8539,8541,8542],{"type":2774,"url":8531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2771,"url":8533},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2771,"url":8535},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2771,"url":8537},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2781,"url":2844},{"type":2771,"url":8540},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2781,"url":3180},{"type":2774,"url":8543},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2851,2852],{"id":316,"slug":8546,"dossier":45,"summary":8547,"aliases":8548,"sourceIds":8549,"published":8550,"modified":8551,"checkedAt":7,"severity":8552,"references":8554,"versionKeys":8558,"packageCount":32,"repositoryCount":663},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[316],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[8553],{"type":2767,"score":2768},[8555,8557],{"type":2771,"url":8556},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":2781,"url":3432},[3446,3447],{"id":317,"slug":8560,"dossier":45,"summary":8561,"aliases":8562,"sourceIds":8565,"published":8566,"modified":8567,"checkedAt":7,"severity":8568,"references":8571,"versionKeys":8584,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[8563,8564],"CVE-2026-25087","PYSEC-2026-113",[317,8564],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[8569],{"type":2764,"score":8570},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[8572,8574,8576,8578,8580,8582],{"type":2774,"url":8573},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2809,"url":8575},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2781,"url":8577},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2771,"url":8579},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2774,"url":8581},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2774,"url":8583},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[8585,8586,8587,8588],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":318,"slug":8590,"dossier":45,"summary":8591,"aliases":8592,"sourceIds":8596,"published":5996,"modified":8597,"checkedAt":7,"severity":8598,"references":8601,"versionKeys":8619,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[8593,8594,8595],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[318],"2026-07-17T17:15:51.452848951Z",[8599,8600],{"type":2764,"score":6000},{"type":2767,"score":8219},[8602,8604,8606,8608,8610,8612,8613,8615,8617],{"type":2774,"url":8603},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2771,"url":8605},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2771,"url":8607},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2771,"url":8609},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2771,"url":8611},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2781,"url":3143},{"type":2771,"url":8614},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2771,"url":8616},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2771,"url":8618},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[8620,3155,3156,3157,5206,5207,8239,8240,8241],"pypi:torch@2.10.0",{"id":319,"slug":8622,"dossier":45,"summary":8623,"aliases":8624,"sourceIds":8627,"published":8628,"modified":8629,"checkedAt":7,"severity":8630,"references":8634,"versionKeys":8646,"packageCount":32,"repositoryCount":632},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[8625,8626],"CVE-2026-41205","PYSEC-2026-88",[319,8626],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[8631,8632],{"type":2764,"score":3279},{"type":2767,"score":8633},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8635,8637,8639,8641,8643,8644],{"type":2774,"url":8636},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2774,"url":8638},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2771,"url":8640},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2771,"url":8642},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2781,"url":2943},{"type":2771,"url":8645},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2951,2952],{"id":320,"slug":8648,"dossier":45,"summary":8649,"aliases":8650,"sourceIds":8653,"published":8654,"modified":8655,"checkedAt":7,"severity":8656,"references":8658,"versionKeys":8667,"packageCount":32,"repositoryCount":632},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[8651,8652],"CVE-2026-53540","PYSEC-2026-3040",[320,8652],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[8657],{"type":2764,"score":6193},[8659,8661,8662,8663,8665],{"type":2771,"url":8660},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2781,"url":3977},{"type":2781,"url":3979},{"type":2774,"url":8664},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2774,"url":8666},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[4175,4176,3983],{"id":321,"slug":8669,"dossier":45,"summary":8670,"aliases":8671,"sourceIds":8674,"published":8675,"modified":8676,"checkedAt":7,"severity":8677,"references":8679,"versionKeys":8690,"packageCount":32,"repositoryCount":632},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[8672,8673],"CVE-2026-53537","PYSEC-2026-3041",[321,8673],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[8678],{"type":2764,"score":4590},[8680,8682,8684,8685,8687,8689],{"type":2771,"url":8681},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2774,"url":8683},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2781,"url":3977},{"type":2774,"url":8686},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2771,"url":8688},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2781,"url":3979},[4175,4176,3983],{"id":322,"slug":8692,"dossier":45,"summary":8693,"aliases":8694,"sourceIds":8697,"published":8698,"modified":8699,"checkedAt":7,"severity":8700,"references":8702,"versionKeys":8715,"packageCount":32,"repositoryCount":632},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[8695,8696],"CVE-2026-41066","PYSEC-2026-87",[322,8696],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[8701],{"type":2764,"score":3279},[8703,8705,8707,8709,8711,8713],{"type":2774,"url":8704},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":2774,"url":8706},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":3136,"url":8708},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":2781,"url":8710},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":2771,"url":8712},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":2771,"url":8714},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[8716,8717,8718],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":323,"slug":8720,"dossier":45,"summary":8721,"aliases":8722,"sourceIds":8726,"published":5996,"modified":8727,"checkedAt":7,"severity":8728,"references":8731,"versionKeys":8746,"packageCount":32,"repositoryCount":594},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[8723,8724,8725],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[323],"2026-06-10T17:41:15.774477397Z",[8729,8730],{"type":2764,"score":6000},{"type":2767,"score":6002},[8732,8734,8735,8736,8737,8739,8740,8742,8744],{"type":2774,"url":8733},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2771,"url":6007},{"type":2771,"url":6009},{"type":2771,"url":6011},{"type":2771,"url":8738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2781,"url":3143},{"type":2771,"url":8741},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2771,"url":8743},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2771,"url":8745},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[3155,3156,3157,5206,5207,8239],{"id":324,"slug":8748,"dossier":45,"summary":8749,"aliases":8750,"sourceIds":8754,"published":8755,"modified":8756,"checkedAt":7,"severity":8757,"references":8759,"versionKeys":8773,"packageCount":32,"repositoryCount":101},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[8751,8752,8753],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[324,8753],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[8758],{"type":2767,"score":3968},[8760,8762,8764,8766,8768,8769,8770,8771],{"type":2771,"url":8761},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2774,"url":8763},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2771,"url":8765},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2771,"url":8767},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2781,"url":3400},{"type":2771,"url":4273},{"type":2781,"url":4275},{"type":2774,"url":8772},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":325,"slug":8775,"dossier":45,"summary":8776,"aliases":8777,"sourceIds":8780,"published":8781,"modified":8782,"checkedAt":7,"severity":8783,"references":8785,"versionKeys":8798,"packageCount":32,"repositoryCount":663},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[8778,8779],"CVE-2025-43859","PYSEC-2026-348",[325,8779],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[8784],{"type":2764,"score":6886},[8786,8788,8790,8792,8794,8796],{"type":2771,"url":8787},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2774,"url":8789},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2771,"url":8791},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2781,"url":8793},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2781,"url":8795},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2774,"url":8797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[8799],"pypi:h11@0.14.0",{"id":326,"slug":8801,"dossier":45,"summary":8802,"aliases":8803,"sourceIds":8806,"published":8807,"modified":8808,"checkedAt":7,"severity":8809,"references":8811,"versionKeys":8825,"packageCount":32,"repositoryCount":32},"ghsa-vr63-x8vc-m265-7041f46b","pypdf possibly loops infinitely when reading DCT inline images without EOF marker",[8804,8805],"CVE-2025-62707","PYSEC-2026-1833",[326,8805],"2025-10-22T19:40:47Z","2026-07-07T17:56:08.279731969Z",[8810],{"type":2767,"score":3512},[8812,8814,8816,8818,8820,8821,8822,8823],{"type":2771,"url":8813},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",{"type":2774,"url":8815},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62707",{"type":2771,"url":8817},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3501",{"type":2771,"url":8819},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002Ff2864d6dd9bac7cecd3f4f54308b25ebbfa178f8",{"type":2781,"url":2782},{"type":2771,"url":7069},{"type":2781,"url":2786},{"type":2774,"url":8824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vr63-x8vc-m265",[2790],{"id":327,"slug":8827,"dossier":45,"summary":8828,"aliases":8829,"sourceIds":8832,"published":8833,"modified":8834,"checkedAt":7,"severity":8835,"references":8837,"versionKeys":8848,"packageCount":32,"repositoryCount":663},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[8830,8831],"CVE-2025-12695","PYSEC-2026-1318",[327,8831],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[8836],{"type":2764,"score":8092},[8838,8840,8842,8844,8846],{"type":2774,"url":8839},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":2781,"url":8841},"https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"type":2771,"url":8843},"https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":2781,"url":8845},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":2774,"url":8847},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[8849,8850,8851],"pypi:dspy@2.5.43","pypi:dspy@2.6.23","pypi:dspy@2.6.27",{"id":328,"slug":8853,"dossier":45,"summary":8854,"aliases":8855,"sourceIds":8858,"published":8859,"modified":8860,"checkedAt":7,"severity":8861,"references":8865,"versionKeys":8874,"packageCount":32,"repositoryCount":574},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[8856,8857],"CVE-2026-22815","PYSEC-2026-2094",[328,8857],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[8862,8863],{"type":2767,"score":3222},{"type":2767,"score":8864},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[8866,8868,8870,8872,8873],{"type":2809,"url":8867},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2774,"url":8869},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2809,"url":8871},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2781,"url":2909},{"type":2774,"url":3029},[2913,2914,2915,2916,2917,2918,2919,2920],{"id":329,"slug":8876,"dossier":45,"summary":8877,"aliases":8878,"sourceIds":8881,"published":8882,"modified":8883,"checkedAt":7,"severity":8884,"references":8886,"versionKeys":8894,"packageCount":32,"repositoryCount":682},"ghsa-w7vc-732c-9m39-90a52664","PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS",[8879,8880],"CVE-2026-48525","PYSEC-2026-178",[329,8880],"2026-05-28T16:16:29.533Z","2026-06-16T15:44:21.139278330Z",[8885],{"type":2764,"score":2869},[8887,8889,8891,8892],{"type":2846,"url":8888},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-w7vc-732c-9m39",{"type":2774,"url":8890},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48525",{"type":2781,"url":4743},{"type":2771,"url":8893},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-178.yaml",[4749,4750],{"id":330,"slug":8896,"dossier":45,"summary":8897,"aliases":8898,"sourceIds":8901,"published":8902,"modified":8903,"checkedAt":7,"severity":8904,"references":8907,"versionKeys":8924,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[8899,8900],"CVE-2025-68146","PYSEC-2026-1375",[330,8900],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[8905],{"type":2764,"score":8906},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8908,8910,8912,8913,8915,8917,8919,8920,8922],{"type":2771,"url":8909},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2771,"url":8911},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2781,"url":8290},{"type":2771,"url":8914},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2771,"url":8916},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2771,"url":8918},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2781,"url":8292},{"type":2774,"url":8921},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2774,"url":8923},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[8296,8297,8298,8299],{"id":331,"slug":8926,"dossier":45,"summary":8927,"aliases":8928,"sourceIds":8931,"published":8932,"modified":8933,"checkedAt":7,"severity":8934,"references":8937,"versionKeys":8948,"packageCount":32,"repositoryCount":64},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[8929,8930],"CVE-2025-69872","PYSEC-2026-2447",[331,8930],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[8935],{"type":2767,"score":8936},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[8938,8940,8942,8944,8946],{"type":2774,"url":8939},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2771,"url":8941},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2781,"url":8943},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2781,"url":8945},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2774,"url":8947},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[8949],"pypi:diskcache@5.6.3",{"id":332,"slug":8951,"dossier":45,"summary":8952,"aliases":8953,"sourceIds":8956,"published":8957,"modified":8958,"checkedAt":7,"severity":8959,"references":8962,"versionKeys":8978,"packageCount":32,"repositoryCount":32},"ghsa-wf5f-4jwr-ppcp-6aafc086","Arbitrary Code Execution in pdfminer.six via Crafted PDF Input",[8954,8955],"CVE-2025-64512","PYSEC-2026-1762",[332,8955],"2025-11-07T20:52:24Z","2026-07-07T17:56:32.052583560Z",[8960],{"type":2764,"score":8961},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8963,8965,8967,8968,8969,8971,8973,8975,8976],{"type":2771,"url":8964},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Fsecurity\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",{"type":2774,"url":8966},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-64512",{"type":2771,"url":6039},{"type":2781,"url":6041},{"type":2771,"url":8970},"https:\u002F\u002Fgithub.com\u002Fpdfminer\u002Fpdfminer.six\u002Freleases\u002Ftag\u002F20251107",{"type":2771,"url":8972},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F11\u002Fmsg00017.html",{"type":2771,"url":8974},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00005.html",{"type":2781,"url":6043},{"type":2774,"url":8977},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wf5f-4jwr-ppcp",[6047],{"id":333,"slug":8980,"dossier":45,"summary":8981,"aliases":8982,"sourceIds":8985,"published":8986,"modified":8987,"checkedAt":7,"severity":8988,"references":8990,"versionKeys":9006,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[8983,8984],"CVE-2026-32874","PYSEC-2026-2291",[333,8984],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[8989],{"type":2764,"score":2904},[8991,8993,8995,8997,8998,9000,9002,9004],{"type":2774,"url":8992},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2774,"url":8994},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2809,"url":8996},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2781,"url":3261},{"type":2774,"url":8999},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2771,"url":9001},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2771,"url":9003},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":3136,"url":9005},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[3265],{"id":334,"slug":9008,"dossier":45,"summary":9009,"aliases":9010,"sourceIds":9013,"published":9014,"modified":9015,"checkedAt":7,"severity":9016,"references":9018,"versionKeys":9032,"packageCount":32,"repositoryCount":32},"ghsa-wgvp-vg3v-2xq3-bebe6cfc","pypdf has possible long runtimes\u002Flarge memory usage for large \u002FToUnicode streams",[9011,9012],"CVE-2026-27025","PYSEC-2026-3024",[334,9012],"2026-02-18T22:41:13Z","2026-07-13T16:43:04.734501329Z",[9017],{"type":2767,"score":3796},[9019,9021,9023,9025,9027,9028,9029,9030],{"type":2771,"url":9020},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",{"type":2774,"url":9022},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27025",{"type":2771,"url":9024},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3646",{"type":2771,"url":9026},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F77d7b8d7cfbe8dd179858dfa42666f73fc6e57a2",{"type":2781,"url":2782},{"type":2771,"url":5403},{"type":2781,"url":2786},{"type":2774,"url":9031},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wgvp-vg3v-2xq3",[2790],{"id":335,"slug":9034,"dossier":45,"summary":9035,"aliases":9036,"sourceIds":9040,"published":9041,"modified":9042,"checkedAt":7,"severity":9043,"references":9046,"versionKeys":9084,"packageCount":32,"repositoryCount":101},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[9037,9038,9039],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[335,9039],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[9044,9045],{"type":2764,"score":2904},{"type":2767,"score":3968},[9047,9049,9051,9053,9055,9056,9058,9060,9062,9064,9066,9068,9069,9071,9073,9075,9076,9078,9080,9082],{"type":2771,"url":9048},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2774,"url":9050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2771,"url":9052},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2771,"url":9054},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2781,"url":3400},{"type":2771,"url":9057},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2771,"url":9059},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2771,"url":9061},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2774,"url":9063},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2774,"url":9065},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2774,"url":9067},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2774,"url":5741},{"type":2774,"url":9070},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2774,"url":9072},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2774,"url":9074},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2774,"url":3440},{"type":2774,"url":9077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2774,"url":9079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2774,"url":9081},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2774,"url":9083},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[3404,3405,3406,3407,3408,3409,3410,3411],{"id":336,"slug":9086,"dossier":45,"summary":9087,"aliases":9088,"sourceIds":9091,"published":9092,"modified":9093,"checkedAt":7,"severity":9094,"references":9096,"versionKeys":9109,"packageCount":32,"repositoryCount":32},"ghsa-wjqc-6w8f-h24c-6b0b96ea","pypdf: Manipulated XMP metadata streams can exhaust RAM",[9089,9090],"CVE-2026-48735","PYSEC-2026-3025",[336,9090],"2026-06-16T13:45:58Z","2026-07-13T16:42:29.123625634Z",[9095],{"type":2767,"score":3796},[9097,9099,9101,9103,9104,9106,9107],{"type":2771,"url":9098},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",{"type":2774,"url":9100},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48735",{"type":2771,"url":9102},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3796",{"type":2781,"url":2782},{"type":2771,"url":9105},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.12.1",{"type":2781,"url":2786},{"type":2774,"url":9108},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wjqc-6w8f-h24c",[2790],{"id":337,"slug":9111,"dossier":45,"summary":9112,"aliases":9113,"sourceIds":9117,"published":9118,"modified":9119,"checkedAt":7,"severity":9120,"references":9123,"versionKeys":9132,"packageCount":32,"repositoryCount":101},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[9114,9115,9116],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[337,9116],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[9121,9122],{"type":2764,"score":3131},{"type":2767,"score":2768},[9124,9126,9128,9130,9131],{"type":2774,"url":9125},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2774,"url":9127},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2771,"url":9129},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2781,"url":3400},{"type":2774,"url":4247},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":338,"slug":9134,"dossier":45,"summary":9135,"aliases":9136,"sourceIds":9139,"published":9140,"modified":9141,"checkedAt":7,"severity":9142,"references":9145,"versionKeys":9158,"packageCount":32,"repositoryCount":632},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[9137,9138],"CVE-2026-24486","PYSEC-2026-1852",[338,9138],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[9143],{"type":2764,"score":9144},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[9146,9148,9150,9152,9153,9155,9156],{"type":2771,"url":9147},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2774,"url":9149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2771,"url":9151},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2781,"url":3977},{"type":2771,"url":9154},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2781,"url":3979},{"type":2774,"url":9157},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[4175,4176,3983],{"id":339,"slug":9160,"dossier":45,"summary":9161,"aliases":9162,"sourceIds":9165,"published":9166,"modified":9167,"checkedAt":7,"severity":9168,"references":9171,"versionKeys":9190,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[9163,9164],"CVE-2026-47102","PYSEC-2026-2600",[339,9164],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[9169,9170],{"type":2764,"score":4132},{"type":2767,"score":8364},[9172,9174,9176,9178,9180,9181,9182,9183,9184,9185,9187,9188],{"type":2774,"url":9173},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2771,"url":9175},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2771,"url":9177},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2771,"url":9179},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2771,"url":8375},{"type":2781,"url":3541},{"type":2771,"url":3543},{"type":2771,"url":8380},{"type":2771,"url":8382},{"type":2771,"url":9186},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2781,"url":3545},{"type":2774,"url":9189},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[3549,3550,3551,3552],{"id":340,"slug":9192,"dossier":45,"summary":9193,"aliases":9194,"sourceIds":9197,"published":9198,"modified":9199,"checkedAt":7,"severity":9200,"references":9202,"versionKeys":9224,"packageCount":32,"repositoryCount":594},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[9195,9196],"CVE-2026-48818","PYSEC-2026-2281",[340,9196],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[9201],{"type":2764,"score":3279},[9203,9205,9206,9208,9210,9212,9214,9216,9218,9220,9222],{"type":2774,"url":9204},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2781,"url":4886},{"type":2771,"url":9207},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2771,"url":9209},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2774,"url":9211},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2774,"url":9213},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2774,"url":9215},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",{"type":2774,"url":9217},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":3136,"url":9219},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2809,"url":9221},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2809,"url":9223},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2888,2889,2890,4893,4894,5035,5036],{"id":341,"slug":9226,"dossier":45,"summary":6962,"aliases":9227,"sourceIds":9230,"published":6967,"modified":9231,"checkedAt":7,"severity":9232,"references":9235,"versionKeys":9249,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[9228,9229],"CVE-2024-11393","PYSEC-2024-228",[341,9229],"2026-06-10T17:00:13.252500033Z",[9233,9234],{"type":2764,"score":6971},{"type":2764,"score":5941},[9236,9238,9239,9240,9241,9243,9245,9247],{"type":2774,"url":9237},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2771,"url":6977},{"type":2771,"url":6979},{"type":2781,"url":2844},{"type":2771,"url":9242},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2771,"url":9244},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2774,"url":9246},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2774,"url":9248},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2851],{"id":342,"slug":9251,"dossier":45,"summary":9252,"aliases":9253,"sourceIds":9256,"published":9257,"modified":9258,"checkedAt":7,"severity":9259,"references":9262,"versionKeys":9274,"packageCount":32,"repositoryCount":32},"ghsa-x284-j5p8-9c5p-9dc7590e","pypdf: Manipulated FlateDecode image dimensions can exhaust RAM",[9254,9255],"CVE-2026-41314","PYSEC-2026-3026",[342,9255],"2026-04-16T21:30:25Z","2026-07-13T16:43:30.190503912Z",[9260,9261],{"type":2764,"score":3582},{"type":2767,"score":3584},[9263,9265,9267,9268,9269,9270,9271,9272],{"type":2771,"url":9264},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",{"type":2774,"url":9266},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41314",{"type":2771,"url":4952},{"type":2771,"url":4954},{"type":2781,"url":2782},{"type":2771,"url":3596},{"type":2781,"url":2786},{"type":2774,"url":9273},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x284-j5p8-9c5p",[2790],{"id":343,"slug":9276,"dossier":45,"summary":9277,"aliases":9278,"sourceIds":9282,"published":9283,"modified":9284,"checkedAt":7,"severity":9285,"references":9290,"versionKeys":9306,"packageCount":32,"repositoryCount":682},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[9279,9280,9281],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[343],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[9286,9288],{"type":2764,"score":9287},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2767,"score":9289},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[9291,9293,9295,9297,9299,9300,9302,9304],{"type":2774,"url":9292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2771,"url":9294},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2771,"url":9296},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2771,"url":9298},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2781,"url":3143},{"type":2771,"url":9301},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2771,"url":9303},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2771,"url":9305},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[3155,3156],{"id":344,"slug":9308,"dossier":45,"summary":9309,"aliases":9310,"sourceIds":9313,"published":9314,"modified":9315,"checkedAt":7,"severity":9316,"references":9318,"versionKeys":9325,"packageCount":32,"repositoryCount":594},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[9311,9312],"CVE-2026-48817","PYSEC-2026-2280",[344,9312],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[9317],{"type":2764,"score":3019},[9319,9321,9323,9324],{"type":2774,"url":9320},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2774,"url":9322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2781,"url":4886},{"type":2774,"url":9217},[2888,2889,2890,4893,4894,5035,5036],{"id":345,"slug":9327,"dossier":45,"summary":9328,"aliases":9329,"sourceIds":9332,"published":9333,"modified":9334,"checkedAt":7,"severity":9335,"references":9337,"versionKeys":9352,"packageCount":32,"repositoryCount":32},"ghsa-x7hp-r3qg-r3cj-a6a2390f","pypdf: Manipulated FlateDecode XFA streams can exhaust RAM",[9330,9331],"CVE-2026-27888","PYSEC-2026-3027",[345,9331],"2026-02-26T19:55:33Z","2026-07-13T16:43:05.154122042Z",[9336],{"type":2767,"score":3512},[9338,9340,9342,9344,9346,9347,9349,9350],{"type":2771,"url":9339},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fsecurity\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",{"type":2774,"url":9341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27888",{"type":2771,"url":9343},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fpull\u002F3658",{"type":2771,"url":9345},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Fcommit\u002F7a4c8246ed48d9d328fb596942271da47b6d109c",{"type":2781,"url":2782},{"type":2771,"url":9348},"https:\u002F\u002Fgithub.com\u002Fpy-pdf\u002Fpypdf\u002Freleases\u002Ftag\u002F6.7.3",{"type":2781,"url":2786},{"type":2774,"url":9351},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x7hp-r3qg-r3cj",[2790],{"id":346,"slug":9354,"dossier":45,"summary":9355,"aliases":9356,"sourceIds":9359,"published":9360,"modified":9361,"checkedAt":7,"severity":9362,"references":9365,"versionKeys":9371,"packageCount":32,"repositoryCount":574},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[9357,9358],"CVE-2026-54274","PYSEC-2026-2108",[346,9358],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[9363,9364],{"type":2767,"score":3512},{"type":2764,"score":2904},[9366,9368,9369],{"type":2774,"url":9367},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2781,"url":2909},{"type":2809,"url":9370},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2913,2914,2915,2916,2917,2918,2919,2920],{"id":347,"slug":9373,"dossier":45,"summary":9374,"aliases":9375,"sourceIds":9376,"published":9377,"modified":9378,"checkedAt":7,"severity":9379,"references":9381,"versionKeys":9388,"packageCount":32,"repositoryCount":663},"ghsa-xf7x-x43h-rpqh-c5648b04","json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS",[],[347],"2026-07-13T23:41:39Z","2026-07-13T23:45:11.773964507Z",[9380],{"type":2764,"score":2904},[9382,9384,9386],{"type":2771,"url":9383},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Fsecurity\u002Fadvisories\u002FGHSA-xf7x-x43h-rpqh",{"type":2781,"url":9385},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair",{"type":2771,"url":9387},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Freleases\u002Ftag\u002Fv0.60.1",[9389,9390,9391],"pypi:json-repair@0.35.0","pypi:json-repair@0.44.1","pypi:json-repair@0.47.6",{"id":348,"slug":9393,"dossier":45,"summary":9394,"aliases":9395,"sourceIds":9399,"published":9400,"modified":9401,"checkedAt":7,"severity":9402,"references":9405,"versionKeys":9419,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[9396,9397,9398],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[348,9398],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[9403],{"type":2764,"score":9404},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[9406,9408,9410,9412,9414,9416,9417],{"type":2774,"url":9407},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2774,"url":9409},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2771,"url":9411},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2809,"url":9413},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2771,"url":9415},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2781,"url":3400},{"type":2771,"url":9418},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[3407],{"id":349,"slug":9421,"dossier":45,"summary":9422,"aliases":9423,"sourceIds":9426,"published":9427,"modified":9428,"checkedAt":7,"severity":9429,"references":9432,"versionKeys":9440,"packageCount":32,"repositoryCount":682},"ghsa-xgmm-8j9v-c9wx-bc6db7ad","PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed",[9424,9425],"CVE-2026-48526","PYSEC-2026-179",[349,9425],"2026-05-28T16:16:29.657Z","2026-06-16T15:44:21.766942950Z",[9430],{"type":2764,"score":9431},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[9433,9435,9437,9438],{"type":2846,"url":9434},"https:\u002F\u002Fgithub.com\u002Fjpadilla\u002Fpyjwt\u002Fsecurity\u002Fadvisories\u002FGHSA-xgmm-8j9v-c9wx",{"type":2774,"url":9436},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48526",{"type":2781,"url":4743},{"type":2771,"url":9439},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyjwt\u002FPYSEC-2026-179.yaml",[4749,4750],{"id":350,"slug":9442,"dossier":45,"summary":9443,"aliases":9444,"sourceIds":9447,"published":9448,"modified":9449,"checkedAt":7,"severity":9450,"references":9452,"versionKeys":9461,"packageCount":32,"repositoryCount":663},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[9445,9446],"CVE-2026-12074","PYSEC-2026-3584",[350,9446],"2026-07-31T16:50:41Z","2026-08-06T15:11:52.598451868Z",[9451],{"type":2764,"score":3279},[9453,9455,9456,9457,9459],{"type":2771,"url":9454},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":2781,"url":3432},{"type":2781,"url":4550},{"type":2774,"url":9458},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":2774,"url":9460},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[3446,3447],{"id":351,"slug":9463,"dossier":45,"summary":9464,"aliases":9465,"sourceIds":9469,"published":9470,"modified":9471,"checkedAt":7,"severity":9472,"references":9475,"versionKeys":9486,"packageCount":32,"repositoryCount":101},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[9466,9467,9468],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[351,9468],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[9473],{"type":2764,"score":9474},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[9476,9478,9480,9482,9484,9485],{"type":2846,"url":9477},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2774,"url":9479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2809,"url":9481},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2809,"url":9483},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2781,"url":3400},{"type":2774,"url":4273},[3404,3405,3406,3407,3408,3409,3410,3411],{"id":352,"slug":9488,"dossier":45,"summary":406,"aliases":9489,"sourceIds":9493,"published":9494,"modified":9495,"checkedAt":7,"severity":9496,"references":9498,"versionKeys":9508,"packageCount":32,"repositoryCount":32},"pysec-2025-148-96224d85",[9490,9491,9492],"CVE-2024-5187","CVE-2025-51480","GHSA-6rq9-53c3-f7vj",[352],"2025-07-22T16:15:30.660Z","2026-05-21T15:00:22.504009793Z",[9497],{"type":2764,"score":5941},[9499,9501,9503,9505,9506],{"type":2774,"url":9500},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rq9-53c3-f7vj",{"type":2809,"url":9502},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F6959",{"type":2809,"url":9504},"https:\u002F\u002Fgithub.com\u002Fonnx\u002Fonnx\u002Fpull\u002F7040",{"type":2781,"url":3288},{"type":2846,"url":9507},"https:\u002F\u002Fwww.gecko.security\u002Fblog\u002Fcve-2025-51480",[3298],{"id":353,"slug":9510,"dossier":45,"summary":406,"aliases":9511,"sourceIds":9513,"published":9514,"modified":9515,"checkedAt":7,"severity":9516,"references":9518,"versionKeys":9524,"packageCount":32,"repositoryCount":682},"pysec-2025-183-08217171",[9512],"CVE-2025-45768",[353],"2025-07-31T21:15:27.320Z","2026-05-21T15:00:28.178881228Z",[9517],{"type":2764,"score":8570},[9519,9521,9523],{"type":2771,"url":9520},"https:\u002F\u002Fgithub.com\u002Fjpadilla",{"type":3136,"url":9522},"https:\u002F\u002Fgist.github.com\u002FZupeiNie\u002F6f65e564f2067b876321d3dfdbb76569",{"type":2781,"url":4743},[4749,4750],{"id":354,"slug":9526,"dossier":45,"summary":406,"aliases":9527,"sourceIds":9530,"published":9531,"modified":9532,"checkedAt":7,"severity":9533,"references":9535,"versionKeys":9544,"packageCount":32,"repositoryCount":682},"pysec-2025-198-62b25ed4",[9528,9529],"BIT-pytorch-2025-46148","CVE-2025-46148",[354],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[9534],{"type":2764,"score":5346},[9536,9538,9540,9542],{"type":2774,"url":9537},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2774,"url":9539},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":3136,"url":9541},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2809,"url":9543},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[3155,3156],{"id":355,"slug":9546,"dossier":45,"summary":406,"aliases":9547,"sourceIds":9550,"published":9551,"modified":9552,"checkedAt":7,"severity":9553,"references":9555,"versionKeys":9561,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[9548,9549],"BIT-pytorch-2025-46149","CVE-2025-46149",[355],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[9554],{"type":2764,"score":5346},[9556,9557,9559],{"type":2774,"url":9537},{"type":3136,"url":9558},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2809,"url":9560},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[3156],{"id":356,"slug":9563,"dossier":45,"summary":406,"aliases":9564,"sourceIds":9567,"published":9568,"modified":9569,"checkedAt":7,"severity":9570,"references":9572,"versionKeys":9580,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[9565,9566],"BIT-pytorch-2025-46150","CVE-2025-46150",[356],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[9571],{"type":2764,"score":5346},[9573,9574,9576,9578],{"type":2774,"url":9537},{"type":3136,"url":9575},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":3136,"url":9577},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2809,"url":9579},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[3156],{"id":357,"slug":9582,"dossier":45,"summary":406,"aliases":9583,"sourceIds":9586,"published":9587,"modified":9588,"checkedAt":7,"severity":9589,"references":9591,"versionKeys":9597,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[9584,9585],"BIT-pytorch-2025-46152","CVE-2025-46152",[357],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[9590],{"type":2764,"score":2869},[9592,9593,9595],{"type":2774,"url":9537},{"type":3136,"url":9594},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2809,"url":9596},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[3156],{"id":358,"slug":9599,"dossier":45,"summary":406,"aliases":9600,"sourceIds":9603,"published":9604,"modified":9605,"checkedAt":7,"severity":9606,"references":9608,"versionKeys":9618,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[9601,9602],"BIT-pytorch-2025-46153","CVE-2025-46153",[358],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[9607],{"type":2764,"score":5346},[9609,9611,9612,9614,9616],{"type":2771,"url":9610},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2774,"url":9537},{"type":2774,"url":9613},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":3136,"url":9615},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2809,"url":9617},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[3156],{"id":359,"slug":9620,"dossier":45,"summary":406,"aliases":9621,"sourceIds":9624,"published":9625,"modified":9626,"checkedAt":7,"severity":9627,"references":9629,"versionKeys":9634,"packageCount":32,"repositoryCount":594},"pysec-2025-203-2febb201",[9622,9623],"BIT-pytorch-2025-55551","CVE-2025-55551",[359],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[9628],{"type":2764,"score":2904},[9630,9632],{"type":2774,"url":9631},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":3136,"url":9633},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[3155,3156,3157,5206,5207,8239],{"id":360,"slug":9636,"dossier":45,"summary":406,"aliases":9637,"sourceIds":9640,"published":9641,"modified":9642,"checkedAt":7,"severity":9643,"references":9645,"versionKeys":9649,"packageCount":32,"repositoryCount":594},"pysec-2025-204-cdae47da",[9638,9639],"BIT-pytorch-2025-55552","CVE-2025-55552",[360],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[9644],{"type":2764,"score":2904},[9646,9647],{"type":2774,"url":9631},{"type":3136,"url":9648},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[3155,3156,3157,5206,5207,8239],{"id":361,"slug":9651,"dossier":45,"summary":406,"aliases":9652,"sourceIds":9655,"published":9656,"modified":9657,"checkedAt":7,"severity":9658,"references":9660,"versionKeys":9666,"packageCount":32,"repositoryCount":663},"pysec-2025-205-fd5e58fd",[9653,9654],"BIT-pytorch-2025-55553","CVE-2025-55553",[361],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[9659],{"type":2764,"score":2904},[9661,9662,9664],{"type":2774,"url":9631},{"type":3136,"url":9663},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2809,"url":9665},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[3155,3156,3157],{"id":362,"slug":9668,"dossier":45,"summary":406,"aliases":9669,"sourceIds":9672,"published":9673,"modified":9674,"checkedAt":7,"severity":9675,"references":9677,"versionKeys":9681,"packageCount":32,"repositoryCount":594},"pysec-2025-206-58322476",[9670,9671],"BIT-pytorch-2025-55554","CVE-2025-55554",[362],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[9676],{"type":2764,"score":2869},[9678,9679],{"type":2774,"url":9631},{"type":3136,"url":9680},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[3155,3156,3157,5206,5207,8239],{"id":363,"slug":9683,"dossier":45,"summary":406,"aliases":9684,"sourceIds":9687,"published":9688,"modified":9689,"checkedAt":7,"severity":9690,"references":9692,"versionKeys":9698,"packageCount":32,"repositoryCount":663},"pysec-2025-207-2abef3fc",[9685,9686],"BIT-pytorch-2025-55557","CVE-2025-55557",[363],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[9691],{"type":2764,"score":2904},[9693,9694,9696],{"type":2774,"url":9631},{"type":3136,"url":9695},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2809,"url":9697},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[3155,3156,3157],{"id":364,"slug":9700,"dossier":45,"summary":406,"aliases":9701,"sourceIds":9704,"published":9705,"modified":9706,"checkedAt":7,"severity":9707,"references":9709,"versionKeys":9715,"packageCount":32,"repositoryCount":663},"pysec-2025-208-6e93fe9d",[9702,9703],"BIT-pytorch-2025-55558","CVE-2025-55558",[364],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[9708],{"type":2764,"score":2904},[9710,9711,9713],{"type":2774,"url":9631},{"type":3136,"url":9712},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2809,"url":9714},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[3155,3156,3157],{"id":365,"slug":9717,"dossier":45,"summary":406,"aliases":9718,"sourceIds":9721,"published":9722,"modified":9723,"checkedAt":7,"severity":9724,"references":9726,"versionKeys":9732,"packageCount":32,"repositoryCount":663},"pysec-2025-209-e6f352b0",[9719,9720],"BIT-pytorch-2025-55560","CVE-2025-55560",[365],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[9725],{"type":2764,"score":2904},[9727,9728,9730],{"type":2774,"url":9631},{"type":3136,"url":9729},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2809,"url":9731},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[3155,3156,3157],{"id":366,"slug":9734,"dossier":45,"summary":406,"aliases":9735,"sourceIds":9737,"published":9738,"modified":9739,"checkedAt":7,"severity":9740,"references":9742,"versionKeys":9745,"packageCount":32,"repositoryCount":663},"pysec-2025-211-d8bd15de",[9736],"CVE-2025-14920",[366],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[9741],{"type":2764,"score":2837},[9743],{"type":2774,"url":9744},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2851,2852,2853],{"id":367,"slug":9747,"dossier":45,"summary":406,"aliases":9748,"sourceIds":9750,"published":9751,"modified":9752,"checkedAt":7,"severity":9753,"references":9755,"versionKeys":9758,"packageCount":32,"repositoryCount":663},"pysec-2025-212-a011b97d",[9749],"CVE-2025-14921",[367],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[9754],{"type":2764,"score":2837},[9756],{"type":2774,"url":9757},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2851,2852,2853],{"id":368,"slug":9760,"dossier":45,"summary":406,"aliases":9761,"sourceIds":9763,"published":9764,"modified":9765,"checkedAt":7,"severity":9766,"references":9768,"versionKeys":9771,"packageCount":32,"repositoryCount":663},"pysec-2025-213-9043dc9b",[9762],"CVE-2025-14924",[368],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[9767],{"type":2764,"score":2837},[9769],{"type":2774,"url":9770},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2851,2852,2853],{"id":369,"slug":9773,"dossier":45,"summary":406,"aliases":9774,"sourceIds":9776,"published":9777,"modified":9778,"checkedAt":7,"severity":9779,"references":9781,"versionKeys":9784,"packageCount":32,"repositoryCount":663},"pysec-2025-214-eb241255",[9775],"CVE-2025-14926",[369],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[9780],{"type":2764,"score":2837},[9782],{"type":2774,"url":9783},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2851,2852,2853],{"id":370,"slug":9786,"dossier":45,"summary":406,"aliases":9787,"sourceIds":9789,"published":9790,"modified":9791,"checkedAt":7,"severity":9792,"references":9794,"versionKeys":9797,"packageCount":32,"repositoryCount":663},"pysec-2025-215-6064f491",[9788],"CVE-2025-14927",[370],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[9793],{"type":2764,"score":2837},[9795],{"type":2774,"url":9796},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2851,2852,2853],{"id":371,"slug":9799,"dossier":45,"summary":406,"aliases":9800,"sourceIds":9802,"published":9803,"modified":9804,"checkedAt":7,"severity":9805,"references":9807,"versionKeys":9810,"packageCount":32,"repositoryCount":663},"pysec-2025-216-5708ed01",[9801],"CVE-2025-14928",[371],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[9806],{"type":2764,"score":2837},[9808],{"type":2774,"url":9809},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2851,2852,2853],{"id":372,"slug":9812,"dossier":45,"summary":406,"aliases":9813,"sourceIds":9815,"published":9816,"modified":9817,"checkedAt":7,"severity":9818,"references":9820,"versionKeys":9823,"packageCount":32,"repositoryCount":594},"pysec-2025-217-2c1ad388",[9814],"CVE-2025-14929",[372],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[9819],{"type":2764,"score":2837},[9821],{"type":2774,"url":9822},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2851,2852,2853,2854,2855,2856,2857],{"id":373,"slug":9825,"dossier":45,"summary":406,"aliases":9826,"sourceIds":9828,"published":9829,"modified":9830,"checkedAt":7,"severity":9831,"references":9833,"versionKeys":9836,"packageCount":32,"repositoryCount":632},"pysec-2025-218-39811fc3",[9827],"CVE-2025-14930",[373],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[9832],{"type":2764,"score":2837},[9834],{"type":2774,"url":9835},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2851,2852,2853,2854],{"id":374,"slug":9838,"dossier":45,"summary":406,"aliases":9839,"sourceIds":9842,"published":9843,"modified":9844,"checkedAt":7,"severity":9845,"references":9847,"versionKeys":9858,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[9840,9841],"BIT-pytorch-2026-4538","CVE-2026-4538",[374],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[9846],{"type":2764,"score":5069},[9848,9850,9852,9854,9856],{"type":2771,"url":9849},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2774,"url":9851},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2774,"url":9853},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":3136,"url":9855},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2809,"url":9857},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[8620,3155,3156,3157,5206,5207,8239,8240,8241],{"id":375,"slug":9860,"dossier":45,"summary":406,"aliases":9861,"sourceIds":9863,"published":9864,"modified":9865,"checkedAt":7,"severity":9866,"references":9868,"versionKeys":9871,"packageCount":32,"repositoryCount":663},"pysec-2026-2085-e081ac1d",[9862],"CVE-2026-12252",[375],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[9867],{"type":2764,"score":2837},[9869],{"type":2846,"url":9870},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[3446,3447],{"id":376,"slug":9873,"dossier":89,"summary":406,"aliases":9874,"sourceIds":9877,"published":9878,"modified":9879,"checkedAt":7,"severity":9880,"references":9883,"versionKeys":9896,"packageCount":32,"repositoryCount":6653},"pysec-2026-2132-627bf7c7",[9875,9876],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[376],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[9881],{"type":2764,"score":9882},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[9884,9886,9888,9889,9890,9892,9894],{"type":2771,"url":9885},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2771,"url":9887},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2774,"url":7369},{"type":2774,"url":7371},{"type":3136,"url":9891},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2809,"url":9893},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2846,"url":9895},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[9897,9898,9899,9900,9901,9902],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":377,"slug":9904,"dossier":45,"summary":406,"aliases":9905,"sourceIds":9910,"published":9911,"modified":9912,"checkedAt":7,"severity":9913,"references":9915,"versionKeys":9931,"packageCount":32,"repositoryCount":574},"pysec-2026-2286-8795b007",[9906,9907,9908,9909],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[377],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[9914],{"type":2764,"score":5941},[9916,9918,9920,9921,9923,9925,9927,9929],{"type":2771,"url":9917},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2771,"url":9919},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2774,"url":3294},{"type":2774,"url":9922},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2774,"url":9924},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":3136,"url":9926},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":3136,"url":9928},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2809,"url":9930},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[3155,3156,3157,5206,5207,8239,8240,8241],{"id":378,"slug":9933,"dossier":45,"summary":406,"aliases":9934,"sourceIds":9936,"published":9937,"modified":9938,"checkedAt":7,"severity":9939,"references":9941,"versionKeys":9944,"packageCount":32,"repositoryCount":663},"pysec-2026-597-f85c09cd",[9935],"CVE-2026-12243",[378],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[9940],{"type":2764,"score":4390},[9942],{"type":2846,"url":9943},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[3446,3447],{"id":379,"slug":9946,"dossier":45,"summary":406,"aliases":9947,"sourceIds":9949,"published":9950,"modified":9951,"checkedAt":7,"severity":9952,"references":9954,"versionKeys":9957,"packageCount":32,"repositoryCount":663},"pysec-2026-99-2c63e84f",[9948],"CVE-2026-0848",[379],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[9953],{"type":2764,"score":5001},[9955],{"type":2846,"url":9956},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[3446,3447],1786591830049]