[{"data":1,"prerenderedAt":8472},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-5012":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":338,"related":341},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":68,"unknownLicensePackageCount":37,"advisoryIds":103,"advisoryCount":336,"providers":337},"opencode:5012","opencode-5012",5012,"LLM Testframework","uba-ki-lab\u002Fllm-testframework","Evaluation of large language models; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Energiemessung","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework","e8d6e99a1fa63b264e727acb553ed9b1499789b1","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fcommit\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1","2026-05-13T07:48:58.631Z","2026-05-13T07:48:57.000Z",{"complete":89,"entryCount":90,"truncated":45},true,35,[92],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"uv-lock","b4c29eab16a40db016821e4ea567956048a046ea","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fllm-testframework\u002F-\u002Fblob\u002Fe8d6e99a1fa63b264e727acb553ed9b1499789b1\u002Fuv.lock","12d0fc9d738085b94454bfb018cbb5fb882c9a1a7e6fd4d1922ea65970708327",462358,"parsed",207,[101],"pypi",13,[104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2c2j-9gv5-cj73","GHSA-2fqr-mr3j-6wp8","GHSA-2h4p-vjrc-8xpq","GHSA-2pc9-4j83-qjmr","GHSA-2vrm-gr82-f7m5","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-38vq-g6vr-w8wf","GHSA-3f6c-7fw2-ppm4","GHSA-3j69-69wj-xqx2","GHSA-3mwp-wvh9-7528","GHSA-3wq7-rqq7-wx6j","GHSA-3ww4-5jv9-j5gm","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4g5m-c9r5-49xf","GHSA-4m7w-qmgq-4wj5","GHSA-4qjh-9fv9-r85r","GHSA-4r2x-xpjr-7cvv","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xpc-pv4p-pm3w","GHSA-5239-wwwm-4pmq","GHSA-537c-gmf6-5ccf","GHSA-53mr-6c8q-9789","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59g5-xgcq-4qw3","GHSA-59p9-h35m-wg4g","GHSA-5cmr-4px5-23pc","GHSA-5jmr-gcrj-2c9q","GHSA-5jv2-g5wq-cmr4","GHSA-5rjg-fvgr-3xxf","GHSA-5rvq-cxj2-64vf","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-69f9-5gxw-wvc2","GHSA-69j4-grxj-j64p","GHSA-69w3-r845-3855","GHSA-69x8-hrgq-fjj8","GHSA-6c4r-fmh3-7rh8","GHSA-6fvq-23cw-5628","GHSA-6jhg-hg63-jvvf","GHSA-6jv3-5f52-599m","GHSA-6mq8-rvhq-8wgg","GHSA-6pr9-rp53-2pmc","GHSA-6qc9-v4r8-22xg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-6v7p-g79w-8964","GHSA-6wgj-66m2-xxp2","GHSA-72m8-9m7m-h278","GHSA-7488-6r32-c95q","GHSA-7972-pg2x-xr59","GHSA-79v4-65xg-pq4g","GHSA-7f5h-v6xp-fcq8","GHSA-7gcm-g887-7qv7","GHSA-7h4p-rffg-7823","GHSA-7rgv-gqhr-fxg3","GHSA-82w8-qh3p-5jfq","GHSA-86qp-5c8j-p5mr","GHSA-887c-mr87-cxwp","GHSA-8fr4-5q9j-m8gm","GHSA-8jr5-v98p-w75m","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-94f4-hr76-p5j6","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-98f3-hwg4-4rf7","GHSA-9hcf-v7m4-6m2j","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9pcc-gvx5-r5wm","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c38f-wx89-p2xg","GHSA-c427-h43c-vf67","GHSA-c65p-x677-fgj6","GHSA-c678-jfcj-6jmf","GHSA-c8rr-9gxc-jprv","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-f96h-pmfr-66vw","GHSA-fgcw-684q-jj6r","GHSA-fh2c-86xm-pm2x","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fjcf-3j3r-78rp","GHSA-fjrm-76x2-c4q4","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g6cj-pr64-35w5","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-grg2-63fw-f2qr","GHSA-gx77-xgc2-4888","GHSA-h35f-9h28-mq5c","GHSA-h4gh-qq45-vh27","GHSA-h75v-3vvj-5mfj","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hgg8-fqqc-vfmw","GHSA-hhrp-gw25-jr43","GHSA-hm4w-wwcw-mr6r","GHSA-hpj7-wq8m-9hgp","GHSA-hpv8-x276-m59f","GHSA-hxxf-235m-72v3","GHSA-j828-28rj-hfhp","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjhc-v7c2-5hh6","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jp82-jpqv-5vv3","GHSA-jr27-m4p2-rc6r","GHSA-jwv3-5hgf-82ww","GHSA-m2h6-j472-rp4c","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-m959-cc7f-wv43","GHSA-mcmc-2m55-j8jj","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mj87-hwqh-73pj","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mrw7-hf4f-83pf","GHSA-mw35-8rx3-xf9r","GHSA-mwh4-6h8g-pg8w","GHSA-p423-j2cm-9vmq","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pmqf-x6x8-p7qw","GHSA-pp6c-gr5w-3c5g","GHSA-pq5c-rjhq-qp7p","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q279-jhrf-cc6v","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-q5fh-2hc8-f6rq","GHSA-q8gq-377p-jq3r","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qh4c-xf7m-gxfc","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qrc4-49gv-mv9m","GHSA-qxrp-vhvm-j765","GHSA-r6ph-v2qm-q3c2","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-rwxx-mrjm-wc2m","GHSA-rxc4-3w6r-4v47","GHSA-v92g-xgxw-vvmm","GHSA-v9pg-7xvm-68hf","GHSA-vffw-93wf-4j4q","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-vrq3-r879-7m65","GHSA-vvw2-h478-xwr3","GHSA-w2fm-2cpv-w7v5","GHSA-w6q7-j642-7c25","GHSA-w853-jp5j-5j7f","GHSA-w8v5-vhqr-4h9v","GHSA-wgvc-ghv9-3pmm","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wp53-j4wj-2cfg","GHSA-wpfp-gwwc-vwq6","GHSA-wqp7-x3pw-xc5r","GHSA-wr9h-g72x-mwhm","GHSA-wrfc-pvp9-mr9g","GHSA-x368-4g9h-fvv4","GHSA-x3gm-94wq-g975","GHSA-x746-7m8f-x49c","GHSA-xcgm-r5h9-7989","GHSA-xf7x-x43h-rpqh","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2132","PYSEC-2026-227","PYSEC-2026-2286","PYSEC-2026-2302",232,[],{"files":339,"occurrenceCount":99},[340],{"path":54,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":342,"vulnerabilities":2220},[343,355,368,379,390,399,409,418,428,437,447,456,465,474,485,497,508,518,527,537,546,557,566,577,587,596,607,616,625,634,644,653,662,671,680,689,698,707,716,725,733,742,752,761,771,780,789,798,807,816,825,834,843,851,860,869,878,888,897,907,916,925,934,943,952,961,970,979,988,997,1006,1015,1025,1033,1042,1051,1060,1069,1078,1087,1096,1105,1114,1123,1132,1143,1152,1160,1169,1178,1187,1196,1204,1213,1222,1230,1239,1248,1257,1266,1275,1284,1293,1302,1310,1319,1328,1337,1345,1354,1363,1372,1380,1388,1397,1406,1416,1425,1434,1442,1450,1459,1468,1477,1486,1495,1504,1513,1522,1530,1538,1547,1556,1565,1574,1583,1591,1599,1607,1615,1623,1631,1640,1648,1657,1666,1675,1685,1694,1703,1712,1721,1730,1739,1748,1757,1766,1775,1784,1793,1803,1812,1821,1830,1839,1848,1857,1866,1875,1884,1893,1902,1911,1921,1930,1939,1948,1957,1966,1974,1982,1991,1999,2009,2018,2027,2036,2044,2053,2061,2070,2079,2088,2097,2106,2114,2122,2131,2139,2148,2157,2166,2175,2184,2193,2202,2211],{"id":344,"slug":345,"identity":346,"label":347,"aiRelevant":89,"provider":348,"advisoryCount":349,"licenseExpressions":350,"versions":352,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":354},"package:pypi:vllm","vllm-571f04fc","pypi:vllm","vLLM",null,39,[351],"Apache-2.0",[353],"0.8.5.post1",[54],{"id":356,"slug":357,"identity":358,"label":359,"aiRelevant":89,"provider":360,"advisoryCount":363,"licenseExpressions":364,"versions":365,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":367},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":361,"label":362},"hugging-face","Hugging Face",25,[351],[366],"4.51.3",[54],{"id":369,"slug":370,"identity":371,"label":372,"aiRelevant":89,"provider":348,"advisoryCount":373,"licenseExpressions":374,"versions":376,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":378},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",23,[375],"BSD-3-Clause",[377],"2.6.0",[54],{"id":380,"slug":381,"identity":382,"label":383,"aiRelevant":89,"provider":348,"advisoryCount":384,"licenseExpressions":385,"versions":387,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":389},"package:pypi:litellm","litellm-e00b5c8b","pypi:litellm","LiteLLM",12,[386],"MIT",[388],"1.68.0",[54],{"id":391,"slug":392,"identity":393,"label":394,"aiRelevant":89,"provider":348,"advisoryCount":32,"licenseExpressions":395,"versions":396,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":398},"package:pypi:dspy","dspy-70e56922","pypi:dspy","DSPy",[386],[397],"2.6.23",[54],{"id":400,"slug":401,"identity":402,"label":403,"aiRelevant":89,"provider":404,"advisoryCount":37,"licenseExpressions":405,"versions":406,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":408},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":361,"label":362},[351],[407],"3.5.1",[54],{"id":70,"slug":71,"identity":410,"label":72,"aiRelevant":89,"provider":411,"advisoryCount":37,"licenseExpressions":414,"versions":415,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":417},"pypi:openai",{"id":412,"label":413},"openai","OpenAI",[351],[416],"1.75.0",[54],{"id":419,"slug":420,"identity":421,"label":422,"aiRelevant":89,"provider":423,"advisoryCount":37,"licenseExpressions":424,"versions":425,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":427},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":361,"label":362},[351],[426],"4.1.0",[54],{"id":429,"slug":430,"identity":431,"label":432,"aiRelevant":89,"provider":348,"advisoryCount":37,"licenseExpressions":433,"versions":434,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":436},"package:pypi:codecarbon","codecarbon-ee26b31e","pypi:codecarbon","CodeCarbon",[386],[435],"3.0.1",[54],{"id":438,"slug":439,"identity":440,"label":441,"aiRelevant":89,"provider":348,"advisoryCount":37,"licenseExpressions":442,"versions":444,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":446},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[443],"non-standard",[445],"0.21.1",[54],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":89,"provider":348,"advisoryCount":37,"licenseExpressions":452,"versions":453,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":455},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[375,443],[454],"1.6.1",[54],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":89,"provider":348,"advisoryCount":37,"licenseExpressions":461,"versions":462,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":464},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[443],[463],"0.9.0",[54],{"id":466,"slug":467,"identity":468,"label":469,"aiRelevant":89,"provider":348,"advisoryCount":37,"licenseExpressions":470,"versions":471,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":473},"package:pypi:xgboost","xgboost-5a870b45","pypi:xgboost","XGBoost",[351],[472],"3.0.0",[54],{"id":475,"slug":476,"identity":477,"label":478,"aiRelevant":45,"provider":348,"advisoryCount":479,"licenseExpressions":480,"versions":482,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":484},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[351,481],"Apache-2.0 AND MIT",[483],"3.11.18",[54],{"id":486,"slug":487,"identity":488,"label":489,"aiRelevant":45,"provider":348,"advisoryCount":490,"licenseExpressions":491,"versions":494,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":496},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[492,493],"HPND","MIT-CMU",[495],"11.2.1",[54],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":45,"provider":348,"advisoryCount":502,"licenseExpressions":503,"versions":505,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":507},"package:pypi:cryptography","cryptography-de36c9c8","pypi:cryptography","cryptography",9,[504],"Apache-2.0 OR BSD-3-Clause",[506],"44.0.3",[54],{"id":509,"slug":510,"identity":511,"label":512,"aiRelevant":45,"provider":348,"advisoryCount":513,"licenseExpressions":514,"versions":515,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":517},"package:pypi:python-multipart","python-multipart-7d2a810e","pypi:python-multipart","python-multipart",8,[351],[516],"0.0.20",[54],{"id":519,"slug":520,"identity":521,"label":522,"aiRelevant":45,"provider":348,"advisoryCount":513,"licenseExpressions":523,"versions":524,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":526},"package:pypi:starlette","starlette-beb9e527","pypi:starlette","starlette",[375],[525],"0.46.2",[54],{"id":528,"slug":529,"identity":530,"label":531,"aiRelevant":45,"provider":348,"advisoryCount":532,"licenseExpressions":533,"versions":534,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":536},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[386],[535],"2.4.0",[54],{"id":538,"slug":539,"identity":540,"label":541,"aiRelevant":45,"provider":348,"advisoryCount":64,"licenseExpressions":542,"versions":543,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":545},"package:pypi:ray","ray-f8b4a0d3","pypi:ray","ray",[351],[544],"2.45.0",[54],{"id":547,"slug":548,"identity":549,"label":550,"aiRelevant":45,"provider":348,"advisoryCount":551,"licenseExpressions":552,"versions":554,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":556},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[553],"BSD-2-Clause",[555],"0.6.1",[54],{"id":558,"slug":559,"identity":560,"label":561,"aiRelevant":45,"provider":348,"advisoryCount":34,"licenseExpressions":562,"versions":563,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":565},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[375,443],[564],"3.1.6",[54],{"id":567,"slug":568,"identity":569,"label":570,"aiRelevant":45,"provider":348,"advisoryCount":34,"licenseExpressions":571,"versions":574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":576},"package:pypi:ujson","ujson-337faf21","pypi:ujson","ujson",[375,572,573],"BSD-3-Clause AND TCL","TCL",[575],"5.10.0",[54],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":45,"provider":348,"advisoryCount":582,"licenseExpressions":583,"versions":584,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":586},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[351],[585],"2.32.3",[54],{"id":588,"slug":589,"identity":590,"label":591,"aiRelevant":45,"provider":348,"advisoryCount":582,"licenseExpressions":592,"versions":593,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":595},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[386],[594],"80.3.1",[54],{"id":597,"slug":598,"identity":599,"label":600,"aiRelevant":45,"provider":348,"advisoryCount":601,"licenseExpressions":602,"versions":604,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":606},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[386,603],"Unlicense",[605],"3.18.0",[54],{"id":608,"slug":609,"identity":610,"label":611,"aiRelevant":45,"provider":348,"advisoryCount":601,"licenseExpressions":612,"versions":613,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":615},"package:pypi:mako","mako-ed406373","pypi:mako","mako",[386],[614],"1.3.10",[54],{"id":617,"slug":618,"identity":619,"label":620,"aiRelevant":45,"provider":348,"advisoryCount":601,"licenseExpressions":621,"versions":622,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":624},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[375],[623],"4.25.7",[54],{"id":626,"slug":627,"identity":628,"label":629,"aiRelevant":45,"provider":348,"advisoryCount":601,"licenseExpressions":630,"versions":631,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":633},"package:pypi:xgrammar","xgrammar-5ebaef86","pypi:xgrammar","xgrammar",[351],[632],"0.1.18",[54],{"id":635,"slug":636,"identity":637,"label":638,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":639,"versions":641,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":643},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[640],"MPL-2.0",[642],"2025.4.26",[54],{"id":645,"slug":646,"identity":647,"label":648,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":649,"versions":650,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":652},"package:pypi:click","click-ef97f731","pypi:click","click",[375,443],[651],"8.1.8",[54],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":658,"versions":659,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":661},"package:pypi:diskcache","diskcache-a019f193","pypi:diskcache","diskcache",[351],[660],"5.6.3",[54],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":667,"versions":668,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":670},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[386],[669],"0.16.0",[54],{"id":672,"slug":673,"identity":674,"label":675,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":676,"versions":677,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":679},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[375,443],[678],"3.10",[54],{"id":681,"slug":682,"identity":683,"label":684,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":685,"versions":686,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":688},"package:pypi:json-repair","json-repair-3bbcd372","pypi:json-repair","json-repair",[443],[687],"0.44.1",[54],{"id":690,"slug":691,"identity":692,"label":693,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":694,"versions":695,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":697},"package:pypi:jwcrypto","jwcrypto-5c3130dd","pypi:jwcrypto","jwcrypto",[443],[696],"1.5.6",[54],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":703,"versions":704,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":706},"package:pypi:msgpack","msgpack-007a8d3b","pypi:msgpack","msgpack",[351],[705],"1.1.0",[54],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":712,"versions":713,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":715},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[351,443],[714],"20.0.0",[54],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":721,"versions":722,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":724},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[553],[723],"2.19.1",[54],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":730,"versions":731,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":732},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[375],[705],[54],{"id":734,"slug":735,"identity":736,"label":737,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":738,"versions":739,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":741},"package:pypi:sentencepiece","sentencepiece-dda4c7df","pypi:sentencepiece","sentencepiece",[443],[740],"0.2.0",[54],{"id":743,"slug":744,"identity":745,"label":746,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":747,"versions":749,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":751},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[748],"MIT AND MPL-2.0",[750],"4.67.1",[54],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":45,"provider":348,"advisoryCount":32,"licenseExpressions":757,"versions":758,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":760},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[386],[759],"20.31.1",[54],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":766,"versions":768,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":770},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[767],"PSF-2.0",[769],"2.6.1",[54],{"id":772,"slug":773,"identity":774,"label":775,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":776,"versions":777,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":779},"package:pypi:aiohttp-cors","aiohttp-cors-2026df90","pypi:aiohttp-cors","aiohttp-cors",[351],[778],"0.8.1",[54],{"id":781,"slug":782,"identity":783,"label":784,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":785,"versions":786,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":788},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[351],[787],"1.3.2",[54],{"id":790,"slug":791,"identity":792,"label":793,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":794,"versions":795,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":797},"package:pypi:airportsdata","airportsdata-afa6be1d","pypi:airportsdata","airportsdata",[443],[796],"20250224",[54],{"id":799,"slug":800,"identity":801,"label":802,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":803,"versions":804,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":806},"package:pypi:alembic","alembic-662caf9d","pypi:alembic","alembic",[386],[805],"1.15.2",[54],{"id":808,"slug":809,"identity":810,"label":811,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":812,"versions":813,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":815},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[386],[814],"0.7.0",[54],{"id":817,"slug":818,"identity":819,"label":820,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":821,"versions":822,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":824},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[443],[823],"4.9.3",[54],{"id":826,"slug":827,"identity":828,"label":829,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":830,"versions":831,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":833},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[386],[832],"4.9.0",[54],{"id":835,"slug":836,"identity":837,"label":838,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":839,"versions":840,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":842},"package:pypi:arrow","arrow-d0e153a5","pypi:arrow","arrow",[443],[841],"1.3.0",[54],{"id":844,"slug":845,"identity":846,"label":847,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":848,"versions":849,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":850},"package:pypi:astor","astor-5ea47d9f","pypi:astor","astor",[375],[778],[54],{"id":852,"slug":853,"identity":854,"label":855,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":856,"versions":857,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":859},"package:pypi:asyncer","asyncer-86b9c8c0","pypi:asyncer","asyncer",[386],[858],"0.0.8",[54],{"id":861,"slug":862,"identity":863,"label":864,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":865,"versions":866,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":868},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[386],[867],"25.3.0",[54],{"id":870,"slug":871,"identity":872,"label":873,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":874,"versions":875,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":877},"package:pypi:backoff","backoff-594e7418","pypi:backoff","backoff",[386],[876],"2.2.1",[54],{"id":879,"slug":880,"identity":881,"label":882,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":883,"versions":885,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":887},"package:pypi:blake3","blake3-71cab3aa","pypi:blake3","blake3",[884],"Apache-2.0 OR CC0-1.0",[886],"1.0.4",[54],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":893,"versions":894,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":896},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[386],[895],"5.5.2",[54],{"id":898,"slug":899,"identity":900,"label":901,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":902,"versions":904,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":906},"package:pypi:cffi","cffi-38e65d3e","pypi:cffi","cffi",[386,903],"MIT-0",[905],"1.17.1",[54],{"id":908,"slug":909,"identity":910,"label":911,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":912,"versions":913,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":915},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[386],[914],"3.4.2",[54],{"id":917,"slug":918,"identity":919,"label":920,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":921,"versions":922,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":924},"package:pypi:cloudpickle","cloudpickle-12e9c0d7","pypi:cloudpickle","cloudpickle",[375],[923],"3.1.1",[54],{"id":926,"slug":927,"identity":928,"label":929,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":930,"versions":931,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":933},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[443],[932],"0.4.6",[54],{"id":935,"slug":936,"identity":937,"label":938,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":939,"versions":940,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":942},"package:pypi:colorful","colorful-3d452f6a","pypi:colorful","colorful",[386],[941],"0.5.6",[54],{"id":944,"slug":945,"identity":946,"label":947,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":948,"versions":949,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":951},"package:pypi:colorlog","colorlog-a388001c","pypi:colorlog","colorlog",[386],[950],"6.9.0",[54],{"id":953,"slug":954,"identity":955,"label":956,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":957,"versions":958,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":960},"package:pypi:compressed-tensors","compressed-tensors-e8905144","pypi:compressed-tensors","compressed-tensors",[351],[959],"0.9.3",[54],{"id":962,"slug":963,"identity":964,"label":965,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":966,"versions":967,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":969},"package:pypi:cupy-cuda12x","cupy-cuda12x-8ab55f02","pypi:cupy-cuda12x","cupy-cuda12x",[386],[968],"13.4.1",[54],{"id":971,"slug":972,"identity":973,"label":974,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":975,"versions":976,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":978},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[386],[977],"1.2.18",[54],{"id":980,"slug":981,"identity":982,"label":983,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":984,"versions":985,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":987},"package:pypi:depyf","depyf-44ccc3bb","pypi:depyf","depyf",[386],[986],"0.18.0",[54],{"id":989,"slug":990,"identity":991,"label":992,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":993,"versions":994,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":996},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[375],[995],"0.3.8",[54],{"id":998,"slug":999,"identity":1000,"label":1001,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1002,"versions":1003,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1005},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[767],[1004],"0.3.9",[54],{"id":1007,"slug":1008,"identity":1009,"label":1010,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1011,"versions":1012,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1014},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[351],[1013],"1.9.0",[54],{"id":1016,"slug":1017,"identity":1018,"label":1019,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1020,"versions":1022,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1024},"package:pypi:dnspython","dnspython-33533784","pypi:dnspython","dnspython",[1021],"ISC",[1023],"2.7.0",[54],{"id":1026,"slug":1027,"identity":1028,"label":1029,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1030,"versions":1031,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1032},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[386],[778],[54],{"id":1034,"slug":1035,"identity":1036,"label":1037,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1038,"versions":1039,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1041},"package:pypi:email-validator","email-validator-b33c8543","pypi:email-validator","email-validator",[603],[1040],"2.2.0",[54],{"id":1043,"slug":1044,"identity":1045,"label":1046,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1047,"versions":1048,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1050},"package:pypi:fastapi","fastapi-e52fd482","pypi:fastapi","fastapi",[386],[1049],"0.115.12",[54],{"id":1052,"slug":1053,"identity":1054,"label":1055,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1056,"versions":1057,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1059},"package:pypi:fastapi-cli","fastapi-cli-8229ae3c","pypi:fastapi-cli","fastapi-cli",[386],[1058],"0.0.7",[54],{"id":1061,"slug":1062,"identity":1063,"label":1064,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1065,"versions":1066,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1068},"package:pypi:fastrlock","fastrlock-0757e61e","pypi:fastrlock","fastrlock",[443],[1067],"0.8.3",[54],{"id":1070,"slug":1071,"identity":1072,"label":1073,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1074,"versions":1075,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1077},"package:pypi:fief-client","fief-client-da5c3c7d","pypi:fief-client","fief-client",[386],[1076],"0.20.0",[54],{"id":1079,"slug":1080,"identity":1081,"label":1082,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1083,"versions":1084,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1086},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[351],[1085],"1.6.0",[54],{"id":1088,"slug":1089,"identity":1090,"label":1091,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1092,"versions":1093,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1095},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[375,443],[1094],"2025.3.0",[54],{"id":1097,"slug":1098,"identity":1099,"label":1100,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1101,"versions":1102,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1104},"package:pypi:gguf","gguf-828fa24b","pypi:gguf","gguf",[386],[1103],"0.16.3",[54],{"id":1106,"slug":1107,"identity":1108,"label":1109,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1110,"versions":1111,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1113},"package:pypi:google-api-core","google-api-core-1f2bc06d","pypi:google-api-core","google-api-core",[351],[1112],"2.24.2",[54],{"id":1115,"slug":1116,"identity":1117,"label":1118,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1119,"versions":1120,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1122},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[351],[1121],"2.40.0",[54],{"id":1124,"slug":1125,"identity":1126,"label":1127,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1128,"versions":1129,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1131},"package:pypi:googleapis-common-protos","googleapis-common-protos-d5ca3481","pypi:googleapis-common-protos","googleapis-common-protos",[351],[1130],"1.70.0",[54],{"id":1133,"slug":1134,"identity":1135,"label":1136,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1137,"versions":1140,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1142},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[386,1138,1139],"MIT AND PSF-2.0","MIT AND Python-2.0",[1141],"3.2.1",[54],{"id":1144,"slug":1145,"identity":1146,"label":1147,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1148,"versions":1149,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1151},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[351],[1150],"1.71.0",[54],{"id":1153,"slug":1154,"identity":1155,"label":1156,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1157,"versions":1158,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1159},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[351],[705],[54],{"id":1161,"slug":1162,"identity":1163,"label":1164,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1165,"versions":1166,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1168},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[375],[1167],"1.0.9",[54],{"id":1170,"slug":1171,"identity":1172,"label":1173,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1174,"versions":1175,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1177},"package:pypi:httptools","httptools-b6cca685","pypi:httptools","httptools",[386],[1176],"0.6.4",[54],{"id":1179,"slug":1180,"identity":1181,"label":1182,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1183,"versions":1184,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1186},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[375],[1185],"0.27.2",[54],{"id":1188,"slug":1189,"identity":1190,"label":1191,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1192,"versions":1193,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1195},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[351,443],[1194],"0.30.2",[54],{"id":1197,"slug":1198,"identity":1199,"label":1200,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1201,"versions":1202,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1203},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[386],[787],[54],{"id":1205,"slug":1206,"identity":1207,"label":1208,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1209,"versions":1210,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1212},"package:pypi:importlib-metadata","importlib-metadata-a3dfda3c","pypi:importlib-metadata","importlib-metadata",[351,443],[1211],"8.0.0",[54],{"id":1214,"slug":1215,"identity":1216,"label":1217,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1218,"versions":1219,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1221},"package:pypi:interegular","interegular-393a5327","pypi:interegular","interegular",[386],[1220],"0.3.3",[54],{"id":1223,"slug":1224,"identity":1225,"label":1226,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1227,"versions":1228,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1229},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[386],[463],[54],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1235,"versions":1236,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1238},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[375],[1237],"1.5.0",[54],{"id":1240,"slug":1241,"identity":1242,"label":1243,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1244,"versions":1245,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1247},"package:pypi:jsonschema","jsonschema-df23f5cd","pypi:jsonschema","jsonschema",[386],[1246],"4.23.0",[54],{"id":1249,"slug":1250,"identity":1251,"label":1252,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1253,"versions":1254,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1256},"package:pypi:jsonschema-specifications","jsonschema-specifications-5d87863a","pypi:jsonschema-specifications","jsonschema-specifications",[386],[1255],"2025.4.1",[54],{"id":1258,"slug":1259,"identity":1260,"label":1261,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1262,"versions":1263,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1265},"package:pypi:lark","lark-56b23f4f","pypi:lark","lark",[386],[1264],"1.2.2",[54],{"id":1267,"slug":1268,"identity":1269,"label":1270,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1271,"versions":1272,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1274},"package:pypi:llguidance","llguidance-a18efde0","pypi:llguidance","llguidance",[386],[1273],"0.7.19",[54],{"id":1276,"slug":1277,"identity":1278,"label":1279,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1280,"versions":1281,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1283},"package:pypi:llvmlite","llvmlite-7b5a17d5","pypi:llvmlite","llvmlite",[443],[1282],"0.44.0",[54],{"id":1285,"slug":1286,"identity":1287,"label":1288,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1289,"versions":1290,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1292},"package:pypi:lm-format-enforcer","lm-format-enforcer-9e319c1b","pypi:lm-format-enforcer","lm-format-enforcer",[386],[1291],"0.10.11",[54],{"id":1294,"slug":1295,"identity":1296,"label":1297,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1298,"versions":1299,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1301},"package:pypi:magicattr","magicattr-40bff089","pypi:magicattr","magicattr",[386],[1300],"0.1.6",[54],{"id":1303,"slug":1304,"identity":1305,"label":1306,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1307,"versions":1308,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1309},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[386],[472],[54],{"id":1311,"slug":1312,"identity":1313,"label":1314,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1315,"versions":1316,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1318},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[375,443],[1317],"3.0.2",[54],{"id":1320,"slug":1321,"identity":1322,"label":1323,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1324,"versions":1325,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1327},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[386],[1326],"0.1.2",[54],{"id":1329,"slug":1330,"identity":1331,"label":1332,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1333,"versions":1334,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1336},"package:pypi:mistral-common","mistral-common-038e1158","pypi:mistral-common","mistral-common",[351],[1335],"1.5.4",[54],{"id":1338,"slug":1339,"identity":1340,"label":1341,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1342,"versions":1343,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1344},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[443],[841],[54],{"id":1346,"slug":1347,"identity":1348,"label":1349,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1350,"versions":1351,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1353},"package:pypi:msgspec","msgspec-abd3da4e","pypi:msgspec","msgspec",[375,443],[1352],"0.19.0",[54],{"id":1355,"slug":1356,"identity":1357,"label":1358,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1359,"versions":1360,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1362},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[351],[1361],"6.4.3",[54],{"id":1364,"slug":1365,"identity":1366,"label":1367,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1368,"versions":1369,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1371},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[375],[1370],"0.70.16",[54],{"id":1373,"slug":1374,"identity":1375,"label":1376,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1377,"versions":1378,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1379},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[443],[1085],[54],{"id":1381,"slug":1382,"identity":1383,"label":1384,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1385,"versions":1386,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1387},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[375,443],[914],[54],{"id":1389,"slug":1390,"identity":1391,"label":1392,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1393,"versions":1394,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1396},"package:pypi:ninja","ninja-d45560ae","pypi:ninja","ninja",[443],[1395],"1.11.1.4",[54],{"id":1398,"slug":1399,"identity":1400,"label":1401,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1402,"versions":1403,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1405},"package:pypi:numba","numba-4cc2d278","pypi:numba","numba",[443],[1404],"0.61.2",[54],{"id":1407,"slug":1408,"identity":1409,"label":1410,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1411,"versions":1413,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1415},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1412,443],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1414],"2.2.5",[54],{"id":1417,"slug":1418,"identity":1419,"label":1420,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1421,"versions":1422,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1424},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[443],[1423],"12.4.5.8",[54],{"id":1426,"slug":1427,"identity":1428,"label":1429,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1430,"versions":1431,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1433},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[443],[1432],"12.4.127",[54],{"id":1435,"slug":1436,"identity":1437,"label":1438,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1439,"versions":1440,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1441},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[443],[1432],[54],{"id":1443,"slug":1444,"identity":1445,"label":1446,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1447,"versions":1448,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1449},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[443],[1432],[54],{"id":1451,"slug":1452,"identity":1453,"label":1454,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1455,"versions":1456,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1458},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[443],[1457],"9.1.0.70",[54],{"id":1460,"slug":1461,"identity":1462,"label":1463,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1464,"versions":1465,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1467},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[443],[1466],"11.2.1.3",[54],{"id":1469,"slug":1470,"identity":1471,"label":1472,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1473,"versions":1474,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1476},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[443],[1475],"10.3.5.147",[54],{"id":1478,"slug":1479,"identity":1480,"label":1481,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1482,"versions":1483,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1485},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[443],[1484],"11.6.1.9",[54],{"id":1487,"slug":1488,"identity":1489,"label":1490,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1491,"versions":1492,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1494},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[443],[1493],"12.3.1.170",[54],{"id":1496,"slug":1497,"identity":1498,"label":1499,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1500,"versions":1501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1503},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[443],[1502],"0.6.2",[54],{"id":1505,"slug":1506,"identity":1507,"label":1508,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1509,"versions":1510,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1512},"package:pypi:nvidia-ml-py","nvidia-ml-py-c07b1551","pypi:nvidia-ml-py","nvidia-ml-py",[443],[1511],"12.570.86",[54],{"id":1514,"slug":1515,"identity":1516,"label":1517,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1518,"versions":1519,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1521},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[375,443],[1520],"2.21.5",[54],{"id":1523,"slug":1524,"identity":1525,"label":1526,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1527,"versions":1528,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1529},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[443],[1432],[54],{"id":1531,"slug":1532,"identity":1533,"label":1534,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1535,"versions":1536,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1537},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[351,443],[1432],[54],{"id":1539,"slug":1540,"identity":1541,"label":1542,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1543,"versions":1544,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1546},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[375],[1545],"2.3.0",[54],{"id":1548,"slug":1549,"identity":1550,"label":1551,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1552,"versions":1553,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1555},"package:pypi:opencensus","opencensus-a78c415d","pypi:opencensus","opencensus",[351],[1554],"0.11.4",[54],{"id":1557,"slug":1558,"identity":1559,"label":1560,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1561,"versions":1562,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1564},"package:pypi:opencensus-context","opencensus-context-22acaa15","pypi:opencensus-context","opencensus-context",[351],[1563],"0.1.3",[54],{"id":1566,"slug":1567,"identity":1568,"label":1569,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1570,"versions":1571,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1573},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[351],[1572],"4.11.0.86",[54],{"id":1575,"slug":1576,"identity":1577,"label":1578,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1579,"versions":1580,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1582},"package:pypi:opentelemetry-api","opentelemetry-api-341bc8f7","pypi:opentelemetry-api","opentelemetry-api",[351],[1581],"1.26.0",[54],{"id":1584,"slug":1585,"identity":1586,"label":1587,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1588,"versions":1589,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1590},"package:pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp-b1d3676e","pypi:opentelemetry-exporter-otlp","opentelemetry-exporter-otlp",[351],[1581],[54],{"id":1592,"slug":1593,"identity":1594,"label":1595,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1596,"versions":1597,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1598},"package:pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common-636ba371","pypi:opentelemetry-exporter-otlp-proto-common","opentelemetry-exporter-otlp-proto-common",[351],[1581],[54],{"id":1600,"slug":1601,"identity":1602,"label":1603,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1604,"versions":1605,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1606},"package:pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc-c102a976","pypi:opentelemetry-exporter-otlp-proto-grpc","opentelemetry-exporter-otlp-proto-grpc",[351],[1581],[54],{"id":1608,"slug":1609,"identity":1610,"label":1611,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1612,"versions":1613,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1614},"package:pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http-6f55af01","pypi:opentelemetry-exporter-otlp-proto-http","opentelemetry-exporter-otlp-proto-http",[351],[1581],[54],{"id":1616,"slug":1617,"identity":1618,"label":1619,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1620,"versions":1621,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1622},"package:pypi:opentelemetry-proto","opentelemetry-proto-f15a3372","pypi:opentelemetry-proto","opentelemetry-proto",[351],[1581],[54],{"id":1624,"slug":1625,"identity":1626,"label":1627,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1628,"versions":1629,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1630},"package:pypi:opentelemetry-sdk","opentelemetry-sdk-38b86085","pypi:opentelemetry-sdk","opentelemetry-sdk",[351],[1581],[54],{"id":1632,"slug":1633,"identity":1634,"label":1635,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1636,"versions":1637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1639},"package:pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions-15f3be17","pypi:opentelemetry-semantic-conventions","opentelemetry-semantic-conventions",[351],[1638],"0.47b0",[54],{"id":1641,"slug":1642,"identity":1643,"label":1644,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1645,"versions":1646,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1647},"package:pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai-ccc88d76","pypi:opentelemetry-semantic-conventions-ai","opentelemetry-semantic-conventions-ai",[351],[932],[54],{"id":1649,"slug":1650,"identity":1651,"label":1652,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1653,"versions":1654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1656},"package:pypi:optuna","optuna-5cb30128","pypi:optuna","optuna",[375,386],[1655],"4.3.0",[54],{"id":1658,"slug":1659,"identity":1660,"label":1661,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1662,"versions":1663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1665},"package:pypi:outlines","outlines-7072ea7b","pypi:outlines","outlines",[351],[1664],"0.1.11",[54],{"id":1667,"slug":1668,"identity":1669,"label":1670,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1671,"versions":1672,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1674},"package:pypi:outlines-core","outlines-core-16063b2f","pypi:outlines-core","outlines-core",[351],[1673],"0.1.26",[54],{"id":1676,"slug":1677,"identity":1678,"label":1679,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1680,"versions":1682,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1684},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1681,443],"Apache-2.0 OR BSD-2-Clause",[1683],"25.0",[54],{"id":1686,"slug":1687,"identity":1688,"label":1689,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1690,"versions":1691,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1693},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[443],[1692],"2.2.3",[54],{"id":1695,"slug":1696,"identity":1697,"label":1698,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1699,"versions":1700,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1702},"package:pypi:partial-json-parser","partial-json-parser-185436fc","pypi:partial-json-parser","partial-json-parser",[386],[1701],"0.2.1.1.post5",[54],{"id":1704,"slug":1705,"identity":1706,"label":1707,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1708,"versions":1709,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1711},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[386],[1710],"4.3.7",[54],{"id":1713,"slug":1714,"identity":1715,"label":1716,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1717,"versions":1719,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1720},"package:pypi:prometheus-client","prometheus-client-7bd206b5","pypi:prometheus-client","prometheus-client",[351,1718],"Apache-2.0 AND BSD-2-Clause",[445],[54],{"id":1722,"slug":1723,"identity":1724,"label":1725,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1726,"versions":1727,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1729},"package:pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator-6b62ecc9","pypi:prometheus-fastapi-instrumentator","prometheus-fastapi-instrumentator",[1021],[1728],"7.1.0",[54],{"id":1731,"slug":1732,"identity":1733,"label":1734,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1735,"versions":1736,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1738},"package:pypi:prompt-toolkit","prompt-toolkit-e6f4118a","pypi:prompt-toolkit","prompt-toolkit",[375,443],[1737],"3.0.51",[54],{"id":1740,"slug":1741,"identity":1742,"label":1743,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1744,"versions":1745,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1747},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[351],[1746],"0.3.1",[54],{"id":1749,"slug":1750,"identity":1751,"label":1752,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1753,"versions":1754,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1756},"package:pypi:proto-plus","proto-plus-41237fa1","pypi:proto-plus","proto-plus",[351],[1755],"1.26.1",[54],{"id":1758,"slug":1759,"identity":1760,"label":1761,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1762,"versions":1763,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1765},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[375],[1764],"7.0.0",[54],{"id":1767,"slug":1768,"identity":1769,"label":1770,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1771,"versions":1772,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1774},"package:pypi:py-cpuinfo","py-cpuinfo-5ef63954","pypi:py-cpuinfo","py-cpuinfo",[386],[1773],"9.0.0",[54],{"id":1776,"slug":1777,"identity":1778,"label":1779,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1780,"versions":1781,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1783},"package:pypi:py-spy","py-spy-5be0886a","pypi:py-spy","py-spy",[386],[1782],"0.4.0",[54],{"id":1785,"slug":1786,"identity":1787,"label":1788,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1789,"versions":1790,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1792},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[443],[1791],"0.4.2",[54],{"id":1794,"slug":1795,"identity":1796,"label":1797,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1798,"versions":1800,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1802},"package:pypi:pycountry","pycountry-938c3061","pypi:pycountry","pycountry",[1799],"LGPL-2.1-only",[1801],"24.6.1",[54],{"id":1804,"slug":1805,"identity":1806,"label":1807,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1808,"versions":1809,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1811},"package:pypi:pycparser","pycparser-102d9d3e","pypi:pycparser","pycparser",[375],[1810],"2.22",[54],{"id":1813,"slug":1814,"identity":1815,"label":1816,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1817,"versions":1818,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1820},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[386],[1819],"2.11.4",[54],{"id":1822,"slug":1823,"identity":1824,"label":1825,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1826,"versions":1827,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1829},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[386],[1828],"2.33.2",[54],{"id":1831,"slug":1832,"identity":1833,"label":1834,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1835,"versions":1836,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1838},"package:pypi:pynvml","pynvml-46c48fc0","pypi:pynvml","pynvml",[375],[1837],"12.0.0",[54],{"id":1840,"slug":1841,"identity":1842,"label":1843,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1844,"versions":1845,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1847},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[443],[1846],"2.9.0.post0",[54],{"id":1849,"slug":1850,"identity":1851,"label":1852,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1853,"versions":1854,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1856},"package:pypi:python-json-logger","python-json-logger-f4803e0b","pypi:python-json-logger","python-json-logger",[553,443],[1855],"3.3.0",[54],{"id":1858,"slug":1859,"identity":1860,"label":1861,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1862,"versions":1863,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1865},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[386],[1864],"2025.2",[54],{"id":1867,"slug":1868,"identity":1869,"label":1870,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1871,"versions":1872,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1874},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[386],[1873],"6.0.2",[54],{"id":1876,"slug":1877,"identity":1878,"label":1879,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1880,"versions":1881,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1883},"package:pypi:pyzmq","pyzmq-30b92392","pypi:pyzmq","pyzmq",[443],[1882],"26.4.0",[54],{"id":1885,"slug":1886,"identity":1887,"label":1888,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1889,"versions":1890,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1892},"package:pypi:questionary","questionary-3aceb11d","pypi:questionary","questionary",[386],[1891],"2.1.0",[54],{"id":1894,"slug":1895,"identity":1896,"label":1897,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1898,"versions":1899,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1901},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[386],[1900],"3.13.0",[54],{"id":1903,"slug":1904,"identity":1905,"label":1906,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1907,"versions":1908,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1910},"package:pypi:referencing","referencing-b8d98ce1","pypi:referencing","referencing",[386],[1909],"0.36.2",[54],{"id":1912,"slug":1913,"identity":1914,"label":1915,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1916,"versions":1918,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1920},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1917,443],"Apache-2.0 AND CNRI-Python",[1919],"2024.11.6",[54],{"id":1922,"slug":1923,"identity":1924,"label":1925,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1926,"versions":1927,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1929},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[386],[1928],"14.0.0",[54],{"id":1931,"slug":1932,"identity":1933,"label":1934,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1935,"versions":1936,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1938},"package:pypi:rich-toolkit","rich-toolkit-96f538ec","pypi:rich-toolkit","rich-toolkit",[386],[1937],"0.14.5",[54],{"id":1940,"slug":1941,"identity":1942,"label":1943,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1944,"versions":1945,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1947},"package:pypi:rpds-py","rpds-py-67c64be8","pypi:rpds-py","rpds-py",[386],[1946],"0.24.0",[54],{"id":1949,"slug":1950,"identity":1951,"label":1952,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1953,"versions":1954,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1956},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[351],[1955],"4.9.1",[54],{"id":1958,"slug":1959,"identity":1960,"label":1961,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1962,"versions":1963,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1965},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[443],[1964],"0.5.3",[54],{"id":1967,"slug":1968,"identity":1969,"label":1970,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1971,"versions":1972,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1973},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[443],[805],[54],{"id":1975,"slug":1976,"identity":1977,"label":1978,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1979,"versions":1980,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1981},"package:pypi:shellingham","shellingham-fceabe5b","pypi:shellingham","shellingham",[443],[1335],[54],{"id":1983,"slug":1984,"identity":1985,"label":1986,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1987,"versions":1988,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1990},"package:pypi:six","six-3c3888bd","pypi:six","six",[386],[1989],"1.17.0",[54],{"id":1992,"slug":1993,"identity":1994,"label":1995,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":1996,"versions":1997,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1998},"package:pypi:smart-open","smart-open-6f8d7c36","pypi:smart-open","smart-open",[386],[1728],[54],{"id":2000,"slug":2001,"identity":2002,"label":2003,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2004,"versions":2006,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2008},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[2005],"Apache-2.0 OR MIT",[2007],"1.3.1",[54],{"id":2010,"slug":2011,"identity":2012,"label":2013,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2014,"versions":2015,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2017},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[386],[2016],"2.0.40",[54],{"id":2019,"slug":2020,"identity":2021,"label":2022,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2023,"versions":2024,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2026},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[443],[2025],"1.13.1",[54],{"id":2028,"slug":2029,"identity":2030,"label":2031,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2032,"versions":2033,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2035},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[351],[2034],"9.1.2",[54],{"id":2037,"slug":2038,"identity":2039,"label":2040,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2041,"versions":2042,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2043},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[386],[1545],[54],{"id":2045,"slug":2046,"identity":2047,"label":2048,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2049,"versions":2050,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2052},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[375],[2051],"3.6.0",[54],{"id":2054,"slug":2055,"identity":2056,"label":2057,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2058,"versions":2059,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2060},"package:pypi:torchaudio","torchaudio-fdd76263","pypi:torchaudio","torchaudio",[553,443],[377],[54],{"id":2062,"slug":2063,"identity":2064,"label":2065,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2066,"versions":2067,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2069},"package:pypi:torchvision","torchvision-7f85cafa","pypi:torchvision","torchvision",[443],[2068],"0.21.0",[54],{"id":2071,"slug":2072,"identity":2073,"label":2074,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2075,"versions":2076,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2078},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[386],[2077],"3.2.0",[54],{"id":2080,"slug":2081,"identity":2082,"label":2083,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2084,"versions":2085,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2087},"package:pypi:typer","typer-b291ff1c","pypi:typer","typer",[386],[2086],"0.15.3",[54],{"id":2089,"slug":2090,"identity":2091,"label":2092,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2093,"versions":2094,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2096},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[351],[2095],"2.9.0.20241206",[54],{"id":2098,"slug":2099,"identity":2100,"label":2101,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2102,"versions":2103,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2105},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[767,443],[2104],"4.13.2",[54],{"id":2107,"slug":2108,"identity":2109,"label":2110,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2111,"versions":2112,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2113},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[386],[1782],[54],{"id":2115,"slug":2116,"identity":2117,"label":2118,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2119,"versions":2120,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2121},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[351],[1864],[54],{"id":2123,"slug":2124,"identity":2125,"label":2126,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2127,"versions":2128,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2130},"package:pypi:uvicorn","uvicorn-07c7a595","pypi:uvicorn","uvicorn",[375],[2129],"0.34.2",[54],{"id":2132,"slug":2133,"identity":2134,"label":2135,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2136,"versions":2137,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2138},"package:pypi:uvloop","uvloop-7921eb0f","pypi:uvloop","uvloop",[386],[2068],[54],{"id":2140,"slug":2141,"identity":2142,"label":2143,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2144,"versions":2145,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2147},"package:pypi:watchfiles","watchfiles-d200b8ce","pypi:watchfiles","watchfiles",[386],[2146],"1.0.5",[54],{"id":2149,"slug":2150,"identity":2151,"label":2152,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2153,"versions":2154,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2156},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[386],[2155],"0.2.13",[54],{"id":2158,"slug":2159,"identity":2160,"label":2161,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2162,"versions":2163,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2165},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[375],[2164],"15.0.1",[54],{"id":2167,"slug":2168,"identity":2169,"label":2170,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2171,"versions":2172,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2174},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[443],[2173],"1.17.2",[54],{"id":2176,"slug":2177,"identity":2178,"label":2179,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2180,"versions":2181,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2183},"package:pypi:xformers","xformers-0f6528e3","pypi:xformers","xformers",[375],[2182],"0.0.29.post2",[54],{"id":2185,"slug":2186,"identity":2187,"label":2188,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2189,"versions":2190,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2192},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[553,443],[2191],"3.5.0",[54],{"id":2194,"slug":2195,"identity":2196,"label":2197,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2198,"versions":2199,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2201},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[351],[2200],"1.20.0",[54],{"id":2203,"slug":2204,"identity":2205,"label":2206,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2207,"versions":2208,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2210},"package:pypi:yaspin","yaspin-3abe0201","pypi:yaspin","yaspin",[386],[2209],"3.1.0",[54],{"id":2212,"slug":2213,"identity":2214,"label":2215,"aiRelevant":45,"provider":348,"advisoryCount":37,"licenseExpressions":2216,"versions":2217,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":2219},"package:pypi:zipp","zipp-75ac1ddb","pypi:zipp","zipp",[386],[2218],"3.21.0",[54],[2221,2260,2292,2325,2356,2388,2436,2461,2492,2535,2561,2587,2614,2643,2671,2706,2729,2756,2790,2816,2836,2868,2886,2911,2953,2979,3008,3041,3079,3102,3124,3149,3174,3207,3235,3258,3288,3316,3346,3382,3405,3428,3451,3481,3508,3527,3581,3608,3631,3662,3689,3704,3733,3758,3781,3803,3826,3855,3881,3907,3930,3954,4001,4027,4054,4104,4132,4163,4202,4231,4267,4285,4335,4374,4402,4434,4457,4489,4512,4537,4578,4602,4625,4658,4682,4716,4742,4770,4800,4820,4843,4868,4893,4925,4953,5005,5037,5067,5098,5132,5157,5194,5220,5244,5272,5296,5322,5345,5364,5392,5425,5450,5478,5501,5529,5554,5588,5622,5637,5671,5693,5715,5742,5776,5797,5818,5843,5873,5893,5925,5948,5970,5997,6022,6043,6089,6114,6140,6163,6187,6206,6228,6249,6271,6301,6329,6352,6377,6400,6427,6456,6478,6499,6521,6548,6573,6597,6626,6647,6679,6703,6729,6763,6785,6812,6839,6872,6891,6927,6966,6998,7025,7062,7089,7142,7170,7197,7227,7259,7284,7311,7337,7359,7382,7410,7437,7464,7488,7515,7538,7562,7592,7617,7645,7697,7720,7746,7778,7811,7840,7865,7901,7933,7952,7971,7991,8019,8044,8064,8081,8100,8117,8138,8154,8169,8186,8201,8218,8235,8252,8265,8278,8291,8304,8317,8330,8343,8356,8378,8409,8423,8452],{"id":104,"slug":2222,"dossier":45,"summary":2223,"aliases":2224,"sourceIds":2227,"published":2228,"modified":2229,"checkedAt":7,"severity":2230,"references":2234,"versionKeys":2258,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[2225,2226],"CVE-2024-39689","PYSEC-2024-230",[104,2226],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[2231],{"type":2232,"score":2233},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2235,2238,2240,2243,2246,2249,2252,2254,2256],{"type":2236,"url":2237},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":2236,"url":2239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":2241,"url":2242},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":2244,"url":2245},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":2247,"url":2248},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":2250,"url":2251},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":2247,"url":2253},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":2236,"url":2255},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":2236,"url":2257},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[2259],"pypi:certifi@2024.6.2",{"id":105,"slug":2261,"dossier":45,"summary":2262,"aliases":2263,"sourceIds":2266,"published":2267,"modified":2268,"checkedAt":7,"severity":2269,"references":2272,"versionKeys":2284,"packageCount":32,"repositoryCount":513},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[2264,2265],"CVE-2026-4372","PYSEC-2026-2289",[105,2265],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[2270],{"type":2232,"score":2271},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2273,2275,2277,2279,2282],{"type":2236,"url":2274},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":2241,"url":2276},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":2244,"url":2278},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":2280,"url":2281},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":2236,"url":2283},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[2285,2286,2287,2288,2289,2290,2291],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",{"id":106,"slug":2293,"dossier":45,"summary":2294,"aliases":2295,"sourceIds":2298,"published":2299,"modified":2300,"checkedAt":7,"severity":2301,"references":2304,"versionKeys":2321,"packageCount":32,"repositoryCount":34},"ghsa-2c2j-9gv5-cj73-60bc1f35","Starlette has possible denial-of-service vector when parsing large files in multipart forms",[2296,2297],"CVE-2025-54121","PYSEC-2026-1941",[106,2297],"2025-07-21T19:34:23Z","2026-07-07T17:57:05.760766451Z",[2302],{"type":2232,"score":2303},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2305,2307,2309,2311,2313,2315,2317,2319],{"type":2247,"url":2306},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",{"type":2236,"url":2308},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-54121",{"type":2241,"url":2310},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002F9f7ec2eb512fcc3fe90b43cb9dd9e1d08696bec1",{"type":2244,"url":2312},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette",{"type":2247,"url":2314},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fblob\u002Ffa5355442753f794965ae1af0f87f9fec1b9a3de\u002Fstarlette\u002Fdatastructures.py#L436C5-L447C14",{"type":2247,"url":2316},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fdiscussions\u002F2927#discussioncomment-13721403",{"type":2244,"url":2318},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fstarlette",{"type":2236,"url":2320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2c2j-9gv5-cj73",[2322,2323,2324],"pypi:starlette@0.37.2","pypi:starlette@0.44.0","pypi:starlette@0.46.2",{"id":107,"slug":2326,"dossier":45,"summary":2327,"aliases":2328,"sourceIds":2331,"published":2332,"modified":2333,"checkedAt":7,"severity":2334,"references":2340,"versionKeys":2347,"packageCount":32,"repositoryCount":502},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[2329,2330],"CVE-2026-54279","PYSEC-2026-2112",[107,2330],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[2335,2338],{"type":2336,"score":2337},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2339},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2341,2343,2345],{"type":2236,"url":2342},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":2244,"url":2344},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":2241,"url":2346},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[2348,2349,2350,2351,2352,2353,2354,2355],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",{"id":108,"slug":2357,"dossier":45,"summary":2358,"aliases":2359,"sourceIds":2362,"published":2363,"modified":2364,"checkedAt":7,"severity":2365,"references":2368,"versionKeys":2385,"packageCount":32,"repositoryCount":551},"ghsa-2h4p-vjrc-8xpq-f59f8dec","Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup",[2360,2361],"CVE-2026-44307","PYSEC-2026-2617",[108,2361],"2026-05-06T21:45:16Z","2026-07-13T16:42:39.139801717Z",[2366],{"type":2336,"score":2367},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2369,2371,2373,2375,2377,2379,2381,2383],{"type":2247,"url":2370},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",{"type":2236,"url":2372},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44307",{"type":2247,"url":2374},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fissues\u002F435",{"type":2247,"url":2376},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002F72e10c573ca0fbcbddd4455abca8ce92a61780d7",{"type":2244,"url":2378},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako",{"type":2247,"url":2380},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_12",{"type":2244,"url":2382},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmako",{"type":2236,"url":2384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2h4p-vjrc-8xpq",[2386,2387],"pypi:mako@1.3.10","pypi:mako@1.3.8",{"id":109,"slug":2389,"dossier":45,"summary":2390,"aliases":2391,"sourceIds":2394,"published":2395,"modified":2396,"checkedAt":7,"severity":2397,"references":2400,"versionKeys":2433,"packageCount":32,"repositoryCount":601},"ghsa-2pc9-4j83-qjmr-6e2eb21d","vLLM affected by RCE via auto_map dynamic module loading during model initialization",[2392,2393],"CVE-2026-22807","PYSEC-2026-2010",[109,2393],"2026-01-21T16:12:54Z","2026-08-07T08:11:59.370441713Z",[2398],{"type":2232,"score":2399},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2401,2403,2405,2407,2409,2411,2413,2415,2417,2419,2421,2423,2425,2427,2429,2431],{"type":2247,"url":2402},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2236,"url":2404},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22807",{"type":2247,"url":2406},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32194",{"type":2247,"url":2408},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",{"type":2247,"url":2410},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22807.json",{"type":2244,"url":2412},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvllm",{"type":2247,"url":2414},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.0",{"type":2244,"url":2416},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm",{"type":2247,"url":2418},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2010.yaml",{"type":2236,"url":2420},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2pc9-4j83-qjmr",{"type":2247,"url":2422},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2431865",{"type":2247,"url":2424},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22807",{"type":2247,"url":2426},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5119",{"type":2247,"url":2428},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":2247,"url":2430},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3782",{"type":2247,"url":2432},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3713",[2434,2435],"pypi:vllm@0.10.1.1","pypi:vllm@0.11.0",{"id":110,"slug":2437,"dossier":45,"summary":2438,"aliases":2439,"sourceIds":2442,"published":2443,"modified":2444,"checkedAt":7,"severity":2445,"references":2450,"versionKeys":2460,"packageCount":32,"repositoryCount":502},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[2440,2441],"CVE-2026-34514","PYSEC-2026-2096",[110,2441],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[2446,2448],{"type":2336,"score":2447},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2449},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[2451,2453,2455,2457,2458],{"type":2241,"url":2452},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":2236,"url":2454},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":2241,"url":2456},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":2244,"url":2344},{"type":2236,"url":2459},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[2348,2349,2350,2351,2352,2353,2354,2355],{"id":111,"slug":2462,"dossier":89,"summary":2463,"aliases":2464,"sourceIds":2467,"published":2468,"modified":2469,"checkedAt":7,"severity":2470,"references":2473,"versionKeys":2486,"packageCount":32,"repositoryCount":102},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[2465,2466],"CVE-2025-66471","PYSEC-2026-1994",[111,2466],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[2471],{"type":2336,"score":2472},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[2474,2476,2478,2480,2482,2484],{"type":2247,"url":2475},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":2236,"url":2477},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":2241,"url":2479},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":2244,"url":2481},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":2244,"url":2483},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":2236,"url":2485},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[2487,2488,2489,2490,2491],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",{"id":112,"slug":2493,"dossier":45,"summary":2494,"aliases":2495,"sourceIds":2499,"published":2500,"modified":2501,"checkedAt":7,"severity":2502,"references":2509,"versionKeys":2531,"packageCount":32,"repositoryCount":582},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[2496,2497,2498],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[112,2498],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[2503,2505,2507],{"type":2232,"score":2504},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":2336,"score":2506},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2232,"score":2508},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2510,2512,2515,2517,2519,2521,2523,2525,2527,2529],{"type":2236,"url":2511},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":2513,"url":2514},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":2513,"url":2516},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":2247,"url":2518},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":2244,"url":2520},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":2247,"url":2522},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":2513,"url":2524},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":2236,"url":2526},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":2236,"url":2528},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":2236,"url":2530},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[2532,2533,2534],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":113,"slug":2536,"dossier":45,"summary":2537,"aliases":2538,"sourceIds":2541,"published":2542,"modified":2543,"checkedAt":7,"severity":2544,"references":2546,"versionKeys":2560,"packageCount":32,"repositoryCount":601},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[2539,2540],"CVE-2025-3933","PYSEC-2026-1977",[113,2540],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[2545],{"type":2232,"score":2303},[2547,2549,2551,2553,2554,2556,2558],{"type":2236,"url":2548},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":2247,"url":2550},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":2247,"url":2552},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":2244,"url":2278},{"type":2247,"url":2555},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":2244,"url":2557},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":2236,"url":2559},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[2285,2286],{"id":114,"slug":2562,"dossier":89,"summary":2563,"aliases":2564,"sourceIds":2567,"published":2568,"modified":2569,"checkedAt":7,"severity":2570,"references":2573,"versionKeys":2586,"packageCount":32,"repositoryCount":102},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[2565,2566],"CVE-2026-21441","PYSEC-2026-1996",[114,2566],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[2571,2572],{"type":2232,"score":2339},{"type":2336,"score":2472},[2574,2576,2578,2580,2581,2583,2584],{"type":2247,"url":2575},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":2236,"url":2577},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":2241,"url":2579},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":2244,"url":2481},{"type":2247,"url":2582},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":2244,"url":2483},{"type":2236,"url":2585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[2487,2488,2489,2490,2491],{"id":115,"slug":2588,"dossier":45,"summary":2589,"aliases":2590,"sourceIds":2593,"published":2594,"modified":2595,"checkedAt":7,"severity":2596,"references":2599,"versionKeys":2612,"packageCount":32,"repositoryCount":32},"ghsa-38vq-g6vr-w8wf-91b7e775","Sentencepiece has a a heap overflow issue",[2591,2592],"CVE-2026-1260","PYSEC-2026-1909",[115,2592],"2026-01-22T18:30:39Z","2026-07-07T17:56:14.124737800Z",[2597],{"type":2336,"score":2598},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2600,2602,2604,2606,2608,2610],{"type":2236,"url":2601},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1260",{"type":2247,"url":2603},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Fcommit\u002Fd856b67fdb3492e035489abf9b3aaf486144b2c0",{"type":2244,"url":2605},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece",{"type":2247,"url":2607},"https:\u002F\u002Fgithub.com\u002Fgoogle\u002Fsentencepiece\u002Freleases\u002Ftag\u002Fv0.2.1",{"type":2244,"url":2609},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsentencepiece",{"type":2236,"url":2611},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38vq-g6vr-w8wf",[2613],"pypi:sentencepiece@0.2.0",{"id":116,"slug":2615,"dossier":45,"summary":2616,"aliases":2617,"sourceIds":2620,"published":2621,"modified":2622,"checkedAt":7,"severity":2623,"references":2626,"versionKeys":2641,"packageCount":32,"repositoryCount":601},"ghsa-3f6c-7fw2-ppm4-735443b9","vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class",[2618,2619],"CVE-2025-6242","PYSEC-2026-2011",[116,2619],"2025-10-07T22:14:15Z","2026-07-07T17:57:19.957237175Z",[2624],{"type":2232,"score":2625},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:H",[2627,2629,2631,2633,2635,2637,2638,2639],{"type":2247,"url":2628},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",{"type":2236,"url":2630},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6242",{"type":2247,"url":2632},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F9d9a2b77f19f68262d5e469c4e82c0f6365ad72d",{"type":2247,"url":2634},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2025-6242",{"type":2247,"url":2636},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2373716",{"type":2244,"url":2416},{"type":2244,"url":2412},{"type":2236,"url":2640},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3f6c-7fw2-ppm4",[2434,2642],"pypi:vllm@0.8.5.post1",{"id":117,"slug":2644,"dossier":45,"summary":2645,"aliases":2646,"sourceIds":2649,"published":2650,"modified":2651,"checkedAt":7,"severity":2652,"references":2655,"versionKeys":2668,"packageCount":32,"repositoryCount":551},"ghsa-3j69-69wj-xqx2-6b8725d1","UltraJSON: Malformed\u002FTruncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()",[2647,2648],"CVE-2026-54911","PYSEC-2026-2294",[117,2648],"2026-06-19T20:47:43Z","2026-07-18T17:45:20.862335233Z",[2653],{"type":2232,"score":2654},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2656,2658,2660,2662,2664,2666],{"type":2241,"url":2657},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-3j69-69wj-xqx2",{"type":2236,"url":2659},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54911",{"type":2241,"url":2661},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F169eaf36b1116fece5034ee79a7a0ef3f6deedcf",{"type":2247,"url":2663},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fujson\u002FPYSEC-2026-2294.yaml",{"type":2244,"url":2665},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson",{"type":2236,"url":2667},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.13.0",[2669,2670],"pypi:ujson@5.10.0","pypi:ujson@5.12.0",{"id":118,"slug":2672,"dossier":45,"summary":2673,"aliases":2674,"sourceIds":2677,"published":2678,"modified":2679,"checkedAt":7,"severity":2680,"references":2683,"versionKeys":2705,"packageCount":32,"repositoryCount":582},"ghsa-3mwp-wvh9-7528-9c78ec85","vLLM: Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server",[2675,2676],"CVE-2026-34756","PYSEC-2026-2298",[118,2676],"2026-04-03T15:35:48Z","2026-07-17T16:30:29.032335074Z",[2681],{"type":2232,"score":2682},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[2684,2686,2688,2690,2692,2694,2696,2698,2700,2702,2703],{"type":2241,"url":2685},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3mwp-wvh9-7528",{"type":2236,"url":2687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34756",{"type":2241,"url":2689},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37952",{"type":2241,"url":2691},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb111f8a61f100fdca08706f41f29ef3548de7380",{"type":2236,"url":2693},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36005",{"type":2236,"url":2695},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:36006",{"type":2247,"url":2697},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34756",{"type":2513,"url":2699},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455425",{"type":2247,"url":2701},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2298.yaml",{"type":2244,"url":2416},{"type":2247,"url":2704},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34756.json",[2434,2435,2642],{"id":119,"slug":2707,"dossier":45,"summary":2708,"aliases":2709,"sourceIds":2712,"published":2713,"modified":2714,"checkedAt":7,"severity":2715,"references":2719,"versionKeys":2728,"packageCount":32,"repositoryCount":502},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[2710,2711],"CVE-2026-34517","PYSEC-2026-2099",[119,2711],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[2716,2718],{"type":2336,"score":2717},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2303},[2720,2722,2724,2726,2727],{"type":2241,"url":2721},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":2236,"url":2723},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":2241,"url":2725},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":120,"slug":2730,"dossier":45,"summary":2731,"aliases":2732,"sourceIds":2735,"published":2736,"modified":2737,"checkedAt":7,"severity":2738,"references":2741,"versionKeys":2755,"packageCount":32,"repositoryCount":582},"ghsa-3ww4-5jv9-j5gm-a5372bc1","vLLM's Artifact Pin Decay allows pinned deployments to load unpinned code, weights, and processors",[2733,2734],"CVE-2026-47155","PYSEC-2026-2301",[120,2734],"2026-06-10T17:11:38Z","2026-07-17T16:30:30.495129102Z",[2739],{"type":2232,"score":2740},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:N",[2742,2744,2746,2748,2750,2752,2753],{"type":2236,"url":2743},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-3ww4-5jv9-j5gm",{"type":2236,"url":2745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47155",{"type":2513,"url":2747},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F42616",{"type":2241,"url":2749},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd26a28ab033697f55a1414b5b0435de7cd6045b6",{"type":2247,"url":2751},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2301.yaml",{"type":2244,"url":2416},{"type":2236,"url":2754},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f1e24c0-87d2-4f6c-a705-820f380879ac",[2434,2435,2642],{"id":121,"slug":2757,"dossier":89,"summary":2758,"aliases":2759,"sourceIds":2763,"published":2764,"modified":2765,"checkedAt":7,"severity":2766,"references":2768,"versionKeys":2781,"packageCount":32,"repositoryCount":102},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[2760,2761,2762],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[121,2762],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[2767],{"type":2232,"score":2339},[2769,2771,2773,2775,2777,2779],{"type":2280,"url":2770},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":2236,"url":2772},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":2241,"url":2774},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":2247,"url":2776},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":2244,"url":2778},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":2236,"url":2780},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2782,2783,2784,2785,2786,2787,2788,2789],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":122,"slug":2791,"dossier":45,"summary":2792,"aliases":2793,"sourceIds":2796,"published":2797,"modified":2798,"checkedAt":7,"severity":2799,"references":2802,"versionKeys":2815,"packageCount":32,"repositoryCount":532},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2794,2795],"CVE-2025-50182","PYSEC-2026-1997",[122,2795],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2800],{"type":2232,"score":2801},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2803,2805,2807,2809,2810,2812,2813],{"type":2247,"url":2804},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":2236,"url":2806},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":2241,"url":2808},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":2244,"url":2481},{"type":2247,"url":2811},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":2244,"url":2483},{"type":2236,"url":2814},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[2487,2488,2489,2490],{"id":123,"slug":2817,"dossier":45,"summary":2818,"aliases":2819,"sourceIds":2822,"published":2823,"modified":2824,"checkedAt":7,"severity":2825,"references":2829,"versionKeys":2835,"packageCount":32,"repositoryCount":502},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2820,2821],"CVE-2026-54273","PYSEC-2026-2107",[123,2821],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2826,2828],{"type":2336,"score":2827},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2339},[2830,2832,2834],{"type":2236,"url":2831},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":2241,"url":2833},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":124,"slug":2837,"dossier":45,"summary":2838,"aliases":2839,"sourceIds":2842,"published":2843,"modified":2844,"checkedAt":7,"severity":2845,"references":2848,"versionKeys":2863,"packageCount":32,"repositoryCount":34},"ghsa-4g5m-c9r5-49xf-40cc28b0","LiteLLM: Local file read via request-supplied OIDC file references",[2840,2841],"CVE-2026-59819","PYSEC-2026-3476",[124,2841],"2026-07-22T22:38:04Z","2026-07-23T15:11:50.258485894Z",[2846],{"type":2336,"score":2847},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2849,2851,2853,2855,2857,2859,2861],{"type":2247,"url":2850},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",{"type":2236,"url":2852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59819",{"type":2247,"url":2854},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25592",{"type":2244,"url":2856},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm",{"type":2247,"url":2858},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.10-stable",{"type":2244,"url":2860},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flitellm",{"type":2236,"url":2862},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4g5m-c9r5-49xf",[2864,2865,2866,2867],"pypi:litellm@1.53.7","pypi:litellm@1.67.4.dev1","pypi:litellm@1.68.0","pypi:litellm@1.73.6.post1",{"id":125,"slug":2869,"dossier":45,"summary":2870,"aliases":2871,"sourceIds":2874,"published":2875,"modified":2876,"checkedAt":7,"severity":2877,"references":2881,"versionKeys":2885,"packageCount":32,"repositoryCount":502},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2872,2873],"CVE-2026-54275","PYSEC-2026-237",[125,2873],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2878,2880],{"type":2336,"score":2879},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2339},[2882,2884],{"type":2236,"url":2883},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":126,"slug":2887,"dossier":45,"summary":2888,"aliases":2889,"sourceIds":2892,"published":2893,"modified":2894,"checkedAt":7,"severity":2895,"references":2898,"versionKeys":2910,"packageCount":32,"repositoryCount":32},"ghsa-4qjh-9fv9-r85r-e1501317","Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching",[2890,2891],"CVE-2025-46570","PYSEC-2025-53",[126,2891],"2025-05-28T18:02:24Z","2026-08-07T08:12:07.737844771Z",[2896],{"type":2232,"score":2897},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[2899,2901,2903,2905,2907,2909],{"type":2236,"url":2900},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4qjh-9fv9-r85r",{"type":2236,"url":2902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46570",{"type":2513,"url":2904},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17045",{"type":2241,"url":2906},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F77073c77bc2006eb80ea6d5128f076f5e6c6f54f",{"type":2247,"url":2908},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-53.yaml",{"type":2244,"url":2416},[2642],{"id":127,"slug":2912,"dossier":45,"summary":2913,"aliases":2914,"sourceIds":2917,"published":2918,"modified":2919,"checkedAt":7,"severity":2920,"references":2923,"versionKeys":2952,"packageCount":32,"repositoryCount":582},"ghsa-4r2x-xpjr-7cvv-b37b8fa2","vLLM has RCE In Video Processing",[2915,2916],"CVE-2026-22778","PYSEC-2026-565",[127,2916],"2026-02-02T17:43:45Z","2026-07-17T16:30:29.022952299Z",[2921],{"type":2232,"score":2922},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2924,2926,2928,2930,2932,2934,2935,2937,2938,2940,2942,2944,2946,2947,2948,2950],{"type":2247,"url":2925},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2236,"url":2927},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22778",{"type":2247,"url":2929},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32319",{"type":2247,"url":2931},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F31987",{"type":2247,"url":2933},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-22778.json",{"type":2244,"url":2412},{"type":2247,"url":2936},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.14.1",{"type":2244,"url":2416},{"type":2247,"url":2939},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-565.yaml",{"type":2236,"url":2941},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4r2x-xpjr-7cvv",{"type":2247,"url":2943},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2436113",{"type":2247,"url":2945},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-22778",{"type":2247,"url":2430},{"type":2247,"url":2432},{"type":2247,"url":2949},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":2247,"url":2951},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",[2434,2435,2642],{"id":128,"slug":2954,"dossier":45,"summary":2955,"aliases":2956,"sourceIds":2959,"published":2960,"modified":2961,"checkedAt":7,"severity":2962,"references":2965,"versionKeys":2978,"packageCount":32,"repositoryCount":601},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2957,2958],"CVE-2025-6921","PYSEC-2026-1980",[128,2958],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2963],{"type":2232,"score":2964},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2966,2968,2970,2972,2973,2975,2976],{"type":2236,"url":2967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":2247,"url":2969},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":2247,"url":2971},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":2244,"url":2278},{"type":2247,"url":2974},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":2244,"url":2557},{"type":2236,"url":2977},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[2285,2286],{"id":129,"slug":2980,"dossier":89,"summary":2981,"aliases":2982,"sourceIds":2986,"published":2987,"modified":2988,"checkedAt":7,"severity":2989,"references":2992,"versionKeys":3007,"packageCount":32,"repositoryCount":102},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[2983,2984,2985],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[129,2985],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[2990],{"type":2232,"score":2991},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2993,2995,2997,2999,3001,3003,3005,3006],{"type":2280,"url":2994},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":2236,"url":2996},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":2241,"url":2998},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":2241,"url":3000},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":2241,"url":3002},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":2247,"url":3004},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":2244,"url":2778},{"type":2236,"url":2780},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":130,"slug":3009,"dossier":45,"summary":3010,"aliases":3011,"sourceIds":3014,"published":3015,"modified":3016,"checkedAt":7,"severity":3017,"references":3021,"versionKeys":3040,"packageCount":32,"repositoryCount":34},"ghsa-4xpc-pv4p-pm3w-c72dbf83","LiteLLM: Authentication Bypass via Host Header Injection",[3012,3013],"CVE-2026-49468","PYSEC-2026-388",[130,3013],"2026-06-16T23:38:26Z","2026-07-18T17:30:30.617013067Z",[3018,3019],{"type":2232,"score":2922},{"type":2336,"score":3020},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[3022,3024,3026,3028,3030,3031,3033,3035,3037,3038],{"type":2247,"url":3023},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2236,"url":3025},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49468",{"type":2247,"url":3027},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-49468",{"type":2247,"url":3029},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491520",{"type":2244,"url":2856},{"type":2247,"url":3032},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.84.0",{"type":2236,"url":3034},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4xpc-pv4p-pm3w",{"type":2247,"url":3036},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flitellm\u002FPYSEC-2026-388.yaml",{"type":2244,"url":2860},{"type":2247,"url":3039},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-49468.json",[2864,2865,2866,2867],{"id":131,"slug":3042,"dossier":89,"summary":3043,"aliases":3044,"sourceIds":3047,"published":3048,"modified":3049,"checkedAt":7,"severity":3050,"references":3053,"versionKeys":3076,"packageCount":32,"repositoryCount":102},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[3045,3046],"CVE-2026-4539","PYSEC-2026-2987",[131,3046],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[3051,3052],{"type":2232,"score":2504},{"type":2336,"score":2506},[3054,3056,3058,3060,3062,3064,3066,3068,3070,3072,3074],{"type":2236,"url":3055},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":2247,"url":3057},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":2247,"url":3059},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":2247,"url":3061},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":2244,"url":3063},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":2247,"url":3065},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":2247,"url":3067},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":2247,"url":3069},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":2247,"url":3071},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":2244,"url":3073},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":2236,"url":3075},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[3077,3078],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":132,"slug":3080,"dossier":45,"summary":3081,"aliases":3082,"sourceIds":3083,"published":3084,"modified":3085,"checkedAt":7,"severity":3086,"references":3088,"versionKeys":3095,"packageCount":32,"repositoryCount":532},"ghsa-537c-gmf6-5ccf-23a24e16","Vulnerable OpenSSL included in cryptography wheels",[],[132],"2026-06-15T20:12:27Z","2026-06-16T19:59:26.897634900Z",[3087],{"type":2232,"score":2339},[3089,3091,3093],{"type":2247,"url":3090},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-537c-gmf6-5ccf",{"type":2244,"url":3092},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography",{"type":2247,"url":3094},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20260609.txt",[3096,3097,3098,3099,3100,3101],"pypi:cryptography@42.0.8","pypi:cryptography@43.0.3","pypi:cryptography@44.0.0","pypi:cryptography@44.0.3","pypi:cryptography@45.0.7","pypi:cryptography@46.0.3",{"id":133,"slug":3103,"dossier":45,"summary":3104,"aliases":3105,"sourceIds":3108,"published":3109,"modified":3110,"checkedAt":7,"severity":3111,"references":3114,"versionKeys":3123,"packageCount":32,"repositoryCount":34},"ghsa-53mr-6c8q-9789-034179e7","LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint",[3106,3107],"CVE-2026-35029","PYSEC-2026-2597",[133,3107],"2026-04-03T21:59:31Z","2026-07-13T16:43:01.087747831Z",[3112],{"type":2336,"score":3113},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:L\u002FSI:L\u002FSA:N",[3115,3117,3119,3120,3121],{"type":2247,"url":3116},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",{"type":2236,"url":3118},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35029",{"type":2244,"url":2856},{"type":2244,"url":2860},{"type":2236,"url":3122},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-53mr-6c8q-9789",[2864,2865,2866,2867],{"id":134,"slug":3125,"dossier":45,"summary":3126,"aliases":3127,"sourceIds":3131,"published":3132,"modified":3133,"checkedAt":7,"severity":3134,"references":3138,"versionKeys":3148,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[3128,3129,3130],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[134,3130],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[3135,3137],{"type":2336,"score":3136},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2232,"score":2922},[3139,3141,3143,3145,3147],{"type":2236,"url":3140},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":2236,"url":3142},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":2247,"url":3144},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":2247,"url":3146},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":2244,"url":2520},[2532],{"id":135,"slug":3150,"dossier":45,"summary":3151,"aliases":3152,"sourceIds":3155,"published":3156,"modified":3157,"checkedAt":7,"severity":3158,"references":3161,"versionKeys":3173,"packageCount":32,"repositoryCount":532},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[3153,3154],"CVE-2025-69226","PYSEC-2026-1097",[135,3154],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[3159],{"type":2336,"score":3160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3162,3164,3166,3168,3169,3171],{"type":2247,"url":3163},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":2236,"url":3165},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":2241,"url":3167},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":2244,"url":2344},{"type":2244,"url":3170},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":2236,"url":3172},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[2348,2349,2350,2351,2352,2353,2354],{"id":136,"slug":3175,"dossier":45,"summary":3176,"aliases":3177,"sourceIds":3181,"published":3182,"modified":3183,"checkedAt":7,"severity":3184,"references":3187,"versionKeys":3202,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[3178,3179,3180],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[136,3180],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[3185],{"type":2232,"score":3186},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[3188,3190,3192,3194,3196,3198,3200],{"type":2247,"url":3189},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":2236,"url":3191},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":2247,"url":3193},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":2241,"url":3195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":2244,"url":3197},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":2244,"url":3199},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":2236,"url":3201},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[3203,3204,3205,3206],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":137,"slug":3208,"dossier":45,"summary":3209,"aliases":3210,"sourceIds":3213,"published":3214,"modified":3215,"checkedAt":7,"severity":3216,"references":3220,"versionKeys":3233,"packageCount":32,"repositoryCount":32},"ghsa-59g5-xgcq-4qw3-949fce0e","Denial of service (DoS) via deformation `multipart\u002Fform-data` boundary",[3211,3212],"CVE-2024-53981","PYSEC-2026-1851",[137,3212],"2024-12-02T21:37:04Z","2026-07-07T17:56:30.840745333Z",[3217,3218],{"type":2232,"score":2339},{"type":2336,"score":3219},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3221,3223,3225,3227,3229,3231],{"type":2247,"url":3222},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",{"type":2236,"url":3224},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-53981",{"type":2247,"url":3226},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002Fc4fe4d3cebc08c660e57dd709af1ffa7059b3177",{"type":2244,"url":3228},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart",{"type":2244,"url":3230},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpython-multipart",{"type":2236,"url":3232},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59g5-xgcq-4qw3",[3234],"pypi:python-multipart@0.0.9",{"id":138,"slug":3236,"dossier":45,"summary":3237,"aliases":3238,"sourceIds":3241,"published":3242,"modified":3243,"checkedAt":7,"severity":3244,"references":3246,"versionKeys":3257,"packageCount":32,"repositoryCount":601},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[3239,3240],"CVE-2025-6638","PYSEC-2026-1981",[138,3240],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[3245],{"type":2232,"score":2964},[3247,3249,3250,3251,3252,3254,3255],{"type":2236,"url":3248},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":2247,"url":2969},{"type":2247,"url":2971},{"type":2244,"url":2278},{"type":2247,"url":3253},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":2244,"url":2557},{"type":2236,"url":3256},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[2285,2286],{"id":139,"slug":3259,"dossier":45,"summary":3260,"aliases":3261,"sourceIds":3264,"published":3265,"modified":3266,"checkedAt":7,"severity":3267,"references":3271,"versionKeys":3286,"packageCount":32,"repositoryCount":32},"ghsa-5cmr-4px5-23pc-6775b484","XGrammar affected by Denial of Service by infinite recursion grammars",[3262,3263],"CVE-2025-57809","PYSEC-2026-2054",[139,3263],"2025-08-25T20:43:45Z","2026-08-07T08:12:03.416511779Z",[3268,3269],{"type":2232,"score":2339},{"type":2336,"score":3270},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[3272,3274,3276,3278,3280,3282,3284],{"type":2247,"url":3273},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",{"type":2236,"url":3275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-57809",{"type":2247,"url":3277},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fissues\u002F250",{"type":2247,"url":3279},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fcommit\u002Fb943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",{"type":2244,"url":3281},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar",{"type":2244,"url":3283},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fxgrammar",{"type":2236,"url":3285},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5cmr-4px5-23pc",[3287],"pypi:xgrammar@0.1.18",{"id":140,"slug":3289,"dossier":45,"summary":3290,"aliases":3291,"sourceIds":3294,"published":3295,"modified":3296,"checkedAt":7,"severity":3297,"references":3300,"versionKeys":3315,"packageCount":32,"repositoryCount":34},"ghsa-5jmr-gcrj-2c9q-651d4e44","LiteLLM: Arbitrary file write via path traversal in Skills archive extraction",[3292,3293],"CVE-2026-59820","PYSEC-2026-3477",[140,3293],"2026-07-22T22:37:15Z","2026-07-23T15:11:39.917682016Z",[3298],{"type":2336,"score":3299},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3301,3303,3305,3307,3309,3310,3312,3313],{"type":2247,"url":3302},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",{"type":2236,"url":3304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59820",{"type":2247,"url":3306},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25475",{"type":2247,"url":3308},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F6a15adcd64137d37f73dee76dfe7481f8c2d9196",{"type":2244,"url":2856},{"type":2247,"url":3311},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.7-stable",{"type":2244,"url":2860},{"type":2236,"url":3314},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jmr-gcrj-2c9q",[2864,2865,2866,2867],{"id":141,"slug":3317,"dossier":45,"summary":3318,"aliases":3319,"sourceIds":3322,"published":3323,"modified":3324,"checkedAt":7,"severity":3325,"references":3330,"versionKeys":3345,"packageCount":32,"repositoryCount":582},"ghsa-5jv2-g5wq-cmr4-b1c3983f","vLLM: GGUF dequantize kernel int truncation exposes uninitialized GPU memory in multi-tenant serving",[3320,3321],"CVE-2026-53923","PYSEC-2026-3403",[141,3321],"2026-06-17T14:03:11Z","2026-07-17T16:30:30.538194678Z",[3326,3328],{"type":2232,"score":3327},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":2336,"score":3329},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3331,3333,3335,3337,3339,3341,3343,3344],{"type":2247,"url":3332},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2236,"url":3334},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53923",{"type":2247,"url":3336},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44971",{"type":2247,"url":3338},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff219788f91952827132fa4fdf916427cd20d225e",{"type":2236,"url":3340},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5jv2-g5wq-cmr4",{"type":2247,"url":3342},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3403.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":142,"slug":3347,"dossier":45,"summary":3348,"aliases":3349,"sourceIds":3353,"published":3354,"modified":3355,"checkedAt":7,"severity":3356,"references":3361,"versionKeys":3378,"packageCount":32,"repositoryCount":582},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[3350,3351,3352],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[142,3352],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[3357,3359],{"type":2336,"score":3358},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2232,"score":3360},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3362,3364,3366,3368,3370,3372,3374,3376],{"type":2280,"url":3363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":2236,"url":3365},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":2513,"url":3367},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":2241,"url":3369},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":2247,"url":3371},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":2244,"url":3373},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":2247,"url":3375},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":2250,"url":3377},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[3379,3380,3381],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":143,"slug":3383,"dossier":45,"summary":3384,"aliases":3385,"sourceIds":3388,"published":3389,"modified":3390,"checkedAt":7,"severity":3391,"references":3393,"versionKeys":3402,"packageCount":32,"repositoryCount":551},"ghsa-5rvq-cxj2-64vf-5e3e7388","python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service",[3386,3387],"CVE-2026-53539","PYSEC-2026-3036",[143,3387],"2026-06-15T20:24:09Z","2026-07-13T16:42:40.830680801Z",[3392],{"type":2232,"score":2339},[3394,3396,3397,3398,3400],{"type":2247,"url":3395},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2244,"url":3228},{"type":2244,"url":3230},{"type":2236,"url":3399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5rvq-cxj2-64vf",{"type":2236,"url":3401},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53539",[3403,3404,3234],"pypi:python-multipart@0.0.18","pypi:python-multipart@0.0.20",{"id":144,"slug":3406,"dossier":89,"summary":3407,"aliases":3408,"sourceIds":3412,"published":3413,"modified":3414,"checkedAt":7,"severity":3415,"references":3417,"versionKeys":3427,"packageCount":32,"repositoryCount":102},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[3409,3410,3411],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[144,3411],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[3416],{"type":2232,"score":2339},[3418,3420,3422,3423,3425,3426],{"type":2280,"url":3419},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":2236,"url":3421},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":2241,"url":2774},{"type":2247,"url":3424},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":2244,"url":2778},{"type":2236,"url":2780},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":145,"slug":3429,"dossier":45,"summary":3430,"aliases":3431,"sourceIds":3435,"published":3436,"modified":3437,"checkedAt":7,"severity":3438,"references":3442,"versionKeys":3450,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[3432,3433,3434],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[145,3434],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[3439,3440],{"type":2232,"score":2508},{"type":2336,"score":3441},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3443,3445,3447,3448],{"type":2236,"url":3444},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":2236,"url":3446},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":2244,"url":2778},{"type":2236,"url":3449},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2785,2786,2787,2788,2789],{"id":146,"slug":3452,"dossier":89,"summary":3453,"aliases":3454,"sourceIds":3458,"published":3459,"modified":3460,"checkedAt":7,"severity":3461,"references":3464,"versionKeys":3480,"packageCount":32,"repositoryCount":102},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[3455,3456,3457],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[146,3457],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[3462],{"type":2336,"score":3463},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3465,3467,3469,3471,3473,3474,3476,3478],{"type":2247,"url":3466},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":2236,"url":3468},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":2247,"url":3470},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":2247,"url":3472},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":2244,"url":2778},{"type":2247,"url":3475},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":2244,"url":3477},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":2236,"url":3479},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":147,"slug":3482,"dossier":45,"summary":3483,"aliases":3484,"sourceIds":3487,"published":3488,"modified":3489,"checkedAt":7,"severity":3490,"references":3496,"versionKeys":3507,"packageCount":32,"repositoryCount":502},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[3485,3486],"CVE-2026-34520","PYSEC-2026-2102",[147,3486],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[3491,3493,3494],{"type":2232,"score":3492},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":2336,"score":2447},{"type":2336,"score":3495},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[3497,3499,3501,3503,3504,3505],{"type":2241,"url":3498},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":2236,"url":3500},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":2241,"url":3502},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":2244,"url":2344},{"type":2236,"url":2459},{"type":2247,"url":3506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[2348,2349,2350,2351,2352,2353,2354,2355],{"id":148,"slug":3509,"dossier":45,"summary":3510,"aliases":3511,"sourceIds":3514,"published":3515,"modified":3516,"checkedAt":7,"severity":3517,"references":3520,"versionKeys":3526,"packageCount":32,"repositoryCount":502},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[3512,3513],"CVE-2026-54277","PYSEC-2026-2110",[148,3513],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[3518,3519],{"type":2336,"score":2827},{"type":2232,"score":2339},[3521,3523,3525],{"type":2236,"url":3522},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":2241,"url":3524},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":149,"slug":3528,"dossier":45,"summary":3529,"aliases":3530,"sourceIds":3533,"published":3534,"modified":3535,"checkedAt":7,"severity":3536,"references":3538,"versionKeys":3579,"packageCount":32,"repositoryCount":532},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[3531,3532],"CVE-2026-23490","PYSEC-2026-1810",[149,3532],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[3537],{"type":2232,"score":2339},[3539,3541,3543,3545,3547,3549,3551,3553,3555,3557,3559,3561,3563,3565,3567,3569,3571,3573,3575,3577],{"type":2247,"url":3540},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":2236,"url":3542},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":2247,"url":3544},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":2247,"url":3546},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":2247,"url":3548},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":2247,"url":3550},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":2247,"url":3552},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":2247,"url":3554},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":2247,"url":3556},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":2247,"url":3558},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":2247,"url":3560},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":2247,"url":3562},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":2247,"url":3564},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":2247,"url":3566},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":2247,"url":3568},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":2247,"url":3570},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":2244,"url":3572},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":2247,"url":3574},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":2247,"url":3576},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":2247,"url":3578},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[3580],"pypi:pyasn1@0.6.1",{"id":150,"slug":3582,"dossier":89,"summary":3583,"aliases":3584,"sourceIds":3587,"published":3588,"modified":3589,"checkedAt":7,"severity":3590,"references":3594,"versionKeys":3603,"packageCount":32,"repositoryCount":3607},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[3585,3586],"CVE-2026-45409","PYSEC-2026-215",[150,3586],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[3591,3592],{"type":2232,"score":2303},{"type":2336,"score":3593},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3595,3597,3599,3601],{"type":2236,"url":3596},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":2236,"url":3598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":2244,"url":3600},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":2247,"url":3602},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[3604,3605,3606],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":151,"slug":3609,"dossier":45,"summary":3610,"aliases":3611,"sourceIds":3614,"published":3615,"modified":3616,"checkedAt":7,"severity":3617,"references":3619,"versionKeys":3630,"packageCount":32,"repositoryCount":532},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[3612,3613],"CVE-2025-69224","PYSEC-2026-1099",[151,3613],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[3618],{"type":2336,"score":2447},[3620,3622,3624,3626,3627,3628],{"type":2247,"url":3621},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":2236,"url":3623},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":2241,"url":3625},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":3629},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[2348,2349,2350,2351,2352,2353,2354],{"id":152,"slug":3632,"dossier":45,"summary":3633,"aliases":3634,"sourceIds":3637,"published":3638,"modified":3639,"checkedAt":7,"severity":3640,"references":3642,"versionKeys":3661,"packageCount":32,"repositoryCount":582},"ghsa-69j4-grxj-j64p-ff78c10b","vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`",[3635,3636],"CVE-2025-62426","PYSEC-2026-2012",[152,3636],"2025-11-20T21:26:24Z","2026-07-17T16:30:30.603743359Z",[3641],{"type":2232,"score":2682},[3643,3645,3647,3649,3651,3653,3655,3656,3658,3660],{"type":2247,"url":3644},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2236,"url":3646},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62426",{"type":2247,"url":3648},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27205",{"type":2247,"url":3650},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F3ada34f9cb4d1af763fdfa3b481862a93eb6bd2b",{"type":2236,"url":3652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69j4-grxj-j64p",{"type":2247,"url":3654},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2012.yaml",{"type":2244,"url":2416},{"type":2247,"url":3657},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fchat_utils.py#L1602-L1610",{"type":2247,"url":3659},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F2a6dc67eb520ddb9c4138d8b35ed6fe6226997fb\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fserving_engine.py#L809-L814",{"type":2244,"url":2412},[2434,2435,2642],{"id":153,"slug":3663,"dossier":45,"summary":3664,"aliases":3665,"sourceIds":3668,"published":3669,"modified":3670,"checkedAt":7,"severity":3671,"references":3676,"versionKeys":3688,"packageCount":32,"repositoryCount":513},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[3666,3667],"CVE-2026-1839","PYSEC-2026-2288",[153,3667],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[3672,3674],{"type":2232,"score":3673},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":2232,"score":3675},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3677,3679,3681,3682,3684,3686],{"type":2236,"url":3678},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":2241,"url":3680},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":2244,"url":2278},{"type":2247,"url":3683},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":2280,"url":3685},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":2236,"url":3687},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[2285,2286,2287,2288,2289,2290,2291],{"id":154,"slug":3690,"dossier":45,"summary":3691,"aliases":3692,"sourceIds":3693,"published":3694,"modified":3695,"checkedAt":7,"severity":3696,"references":3699,"versionKeys":3703,"packageCount":32,"repositoryCount":34},"ghsa-69x8-hrgq-fjj8-13befa28","LiteLLM: Password hash exposure and pass-the-hash authentication bypass",[],[154],"2026-04-08T00:04:12Z","2026-04-17T01:29:14.845270912Z",[3697],{"type":2336,"score":3698},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[3700,3702],{"type":2247,"url":3701},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-69x8-hrgq-fjj8",{"type":2244,"url":2856},[2864,2865,2866,2867],{"id":155,"slug":3705,"dossier":45,"summary":3706,"aliases":3707,"sourceIds":3710,"published":3711,"modified":3712,"checkedAt":7,"severity":3713,"references":3718,"versionKeys":3732,"packageCount":32,"repositoryCount":582},"ghsa-6c4r-fmh3-7rh8-a82d795c","vLLM: Processing differential in multi-channel audio downmixing enables hidden-input\u002Fmoderation bypass for audio models",[3708,3709],"CVE-2026-34760","PYSEC-2026-2299",[155,3709],"2026-04-02T20:16:25.437Z","2026-07-17T17:00:52.155049383Z",[3714,3716],{"type":2232,"score":3715},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",{"type":2232,"score":3717},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:L",[3719,3721,3723,3725,3727,3729,3730],{"type":2236,"url":3720},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6c4r-fmh3-7rh8",{"type":2236,"url":3722},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34760",{"type":2513,"url":3724},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37058",{"type":2241,"url":3726},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fc7f98b4d0a63b32ed939e2b6dfaa8a626e9b46c4",{"type":2247,"url":3728},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2299.yaml",{"type":2244,"url":2416},{"type":2236,"url":3731},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.18.0",[2434,2435,2642],{"id":156,"slug":3734,"dossier":45,"summary":3735,"aliases":3736,"sourceIds":3739,"published":3740,"modified":3741,"checkedAt":7,"severity":3742,"references":3744,"versionKeys":3757,"packageCount":32,"repositoryCount":601},"ghsa-6fvq-23cw-5628-8eb01b7c","vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server",[3737,3738],"CVE-2025-61620","PYSEC-2026-2013",[156,3738],"2025-10-07T21:35:22Z","2026-07-07T17:56:38.020494737Z",[3743],{"type":2232,"score":2682},[3745,3747,3749,3751,3752,3753,3755],{"type":2247,"url":3746},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2247,"url":3748},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F25794",{"type":2247,"url":3750},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F7977e5027c2250a4abc1f474c5619c40b4e5682f",{"type":2244,"url":2416},{"type":2244,"url":2412},{"type":2236,"url":3754},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6fvq-23cw-5628",{"type":2236,"url":3756},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-61620",[2434,2642],{"id":157,"slug":3759,"dossier":45,"summary":3760,"aliases":3761,"sourceIds":3764,"published":3765,"modified":3766,"checkedAt":7,"severity":3767,"references":3769,"versionKeys":3780,"packageCount":32,"repositoryCount":532},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[3762,3763],"CVE-2025-69228","PYSEC-2026-1100",[157,3763],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[3768],{"type":2336,"score":2827},[3770,3772,3774,3776,3777,3778],{"type":2247,"url":3771},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":2236,"url":3773},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":2241,"url":3775},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":3779},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[2348,2349,2350,2351,2352,2353,2354],{"id":158,"slug":3782,"dossier":45,"summary":3783,"aliases":3784,"sourceIds":3787,"published":3788,"modified":3789,"checkedAt":7,"severity":3790,"references":3793,"versionKeys":3802,"packageCount":32,"repositoryCount":551},"ghsa-6jv3-5f52-599m-dd700d26","python-multipart: Semicolon treated as querystring field separator enables parameter smuggling",[3785,3786],"CVE-2026-53538","PYSEC-2026-3037",[158,3786],"2026-06-15T20:22:25Z","2026-07-13T16:43:47.733262470Z",[3791],{"type":2232,"score":3792},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[3794,3796,3797,3798,3800],{"type":2247,"url":3795},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2244,"url":3228},{"type":2244,"url":3230},{"type":2236,"url":3799},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jv3-5f52-599m",{"type":2236,"url":3801},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53538",[3403,3404,3234],{"id":159,"slug":3804,"dossier":45,"summary":3805,"aliases":3806,"sourceIds":3809,"published":3810,"modified":3811,"checkedAt":7,"severity":3812,"references":3814,"versionKeys":3825,"packageCount":32,"repositoryCount":532},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[3807,3808],"CVE-2025-69223","PYSEC-2026-1101",[159,3808],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[3813],{"type":2232,"score":2339},[3815,3817,3819,3821,3822,3823],{"type":2247,"url":3816},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":2236,"url":3818},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":2241,"url":3820},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":3824},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[2348,2349,2350,2351,2352,2353,2354],{"id":160,"slug":3827,"dossier":45,"summary":3828,"aliases":3829,"sourceIds":3832,"published":3833,"modified":3834,"checkedAt":7,"severity":3835,"references":3837,"versionKeys":3854,"packageCount":32,"repositoryCount":582},"ghsa-6pr9-rp53-2pmc-1471f1e7","vLLM: OOM Denial of Service via Audio Decompression Bomb",[3830,3831],"CVE-2026-54233","PYSEC-2026-3404",[160,3831],"2026-06-17T14:06:22Z","2026-07-17T16:45:18.929893807Z",[3836],{"type":2232,"score":2682},[3838,3840,3842,3844,3846,3848,3850,3851,3853],{"type":2247,"url":3839},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2236,"url":3841},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54233",{"type":2247,"url":3843},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44970",{"type":2247,"url":3845},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F1b1359c33269446f13c05da9a90c25174cbea590",{"type":2236,"url":3847},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6pr9-rp53-2pmc",{"type":2247,"url":3849},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3404.yaml",{"type":2244,"url":2416},{"type":2247,"url":3852},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.23.1rc0",{"type":2244,"url":2412},[2434,2435,2642],{"id":161,"slug":3856,"dossier":45,"summary":3857,"aliases":3858,"sourceIds":3861,"published":3862,"modified":3863,"checkedAt":7,"severity":3864,"references":3866,"versionKeys":3880,"packageCount":32,"repositoryCount":32},"ghsa-6qc9-v4r8-22xg-0e64781f","vLLM DOS: Remotely kill vllm over http with invalid JSON schema",[3859,3860],"CVE-2025-48942","PYSEC-2025-54",[161,3860],"2025-05-28T19:41:53Z","2026-08-07T08:12:01.995568358Z",[3865],{"type":2232,"score":2682},[3867,3869,3871,3873,3875,3877,3879],{"type":2280,"url":3868},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-6qc9-v4r8-22xg",{"type":2236,"url":3870},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48942",{"type":2513,"url":3872},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17248",{"type":2513,"url":3874},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17623",{"type":2241,"url":3876},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F08bf7840780980c7568c573c70a6a8db94fd45ff",{"type":2247,"url":3878},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-54.yaml",{"type":2244,"url":2416},[2642],{"id":162,"slug":3882,"dossier":89,"summary":3883,"aliases":3884,"sourceIds":3888,"published":3889,"modified":3890,"checkedAt":7,"severity":3891,"references":3893,"versionKeys":3906,"packageCount":32,"repositoryCount":102},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[3885,3886,3887],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[162,3887],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[3892],{"type":2232,"score":2339},[3894,3896,3898,3900,3902,3904,3905],{"type":2280,"url":3895},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":2236,"url":3897},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":2241,"url":3899},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":2241,"url":3901},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":2247,"url":3903},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":2244,"url":2778},{"type":2236,"url":3475},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":163,"slug":3908,"dossier":45,"summary":3909,"aliases":3910,"sourceIds":3913,"published":3914,"modified":3915,"checkedAt":7,"severity":3916,"references":3918,"versionKeys":3929,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3911,3912],"CVE-2024-12720","PYSEC-2026-1982",[163,3912],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[3917],{"type":2232,"score":2964},[3919,3921,3923,3924,3926,3927],{"type":2236,"url":3920},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":2247,"url":3922},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":2244,"url":2278},{"type":2247,"url":3925},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":2244,"url":2557},{"type":2236,"url":3928},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[2285],{"id":164,"slug":3931,"dossier":45,"summary":3932,"aliases":3933,"sourceIds":3936,"published":3937,"modified":3938,"checkedAt":7,"severity":3939,"references":3941,"versionKeys":3950,"packageCount":32,"repositoryCount":34},"ghsa-6v7p-g79w-8964-7ab8b488","MessagePack for Python: Out-of-bounds read \u002F crash on Unpacker reuse after a caught error",[3934,3935],"CVE-2026-57585","PYSEC-2026-3625",[164,3935],"2026-06-19T21:42:55Z","2026-08-07T09:55:56.955079633Z",[3940],{"type":2232,"score":2339},[3942,3944,3946,3948],{"type":2236,"url":3943},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fsecurity\u002Fadvisories\u002FGHSA-6v7p-g79w-8964",{"type":2241,"url":3945},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Fcommit\u002F2c56ddb5d0025ed481d962c0f5d62d19dec7476d",{"type":2244,"url":3947},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python",{"type":2247,"url":3949},"https:\u002F\u002Fgithub.com\u002Fmsgpack\u002Fmsgpack-python\u002Freleases\u002Ftag\u002Fv1.2.1",[3951,3952,3953],"pypi:msgpack@1.1.0","pypi:msgpack@1.1.1","pypi:msgpack@1.1.2",{"id":165,"slug":3955,"dossier":45,"summary":3956,"aliases":3957,"sourceIds":3960,"published":3961,"modified":3962,"checkedAt":7,"severity":3963,"references":3965,"versionKeys":3998,"packageCount":32,"repositoryCount":601},"ghsa-6wgj-66m2-xxp2-37eb592b","Ray has arbitrary code execution via jobs submission API",[3958,3959],"CVE-2023-48022","PYSEC-2026-517",[165,3959],"2023-11-28T09:30:26Z","2026-07-01T20:23:03.600233Z",[3964],{"type":2232,"score":2922},[3966,3968,3970,3972,3974,3976,3978,3980,3982,3984,3986,3988,3990,3992,3994,3996],{"type":2236,"url":3967},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-48022",{"type":2247,"url":3969},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F978947083b1e192dba61ef653c863b11d56b0936",{"type":2247,"url":3971},"https:\u002F\u002Fatlas.mitre.org\u002Fstudies\u002FAML.CS0023",{"type":2247,"url":3973},"https:\u002F\u002Fbishopfox.com\u002Fblog\u002Fray-versions-2-6-3-2-8-0",{"type":2247,"url":3975},"https:\u002F\u002Fconsole.vulncheck.com\u002Fcve\u002FCVE-2023-48022",{"type":2247,"url":3977},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Findex.html",{"type":2247,"url":3979},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Flatest\u002Fray-security\u002Ftoken-auth.html",{"type":2236,"url":3981},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xg2h-7cxj-3gvh",{"type":2247,"url":3983},"https:\u002F\u002Fgithub.com\u002Fhonysyang\u002FRay",{"type":2244,"url":3985},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray",{"type":2247,"url":3987},"https:\u002F\u002Fwww.anyscale.com\u002Fblog\u002Fupdate-on-ray-cve-2023-48022-new-verification-tooling-available",{"type":2247,"url":3989},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-attack-ai-workloads-actively-exploited-in-the-wild",{"type":2247,"url":3991},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fshadowray-cve-2023-48022-exploit",{"type":2247,"url":3993},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fthe-story-of-shadowray-cve-2023-48022",{"type":2247,"url":3995},"https:\u002F\u002Fwww.vulncheck.com\u002Fblog\u002Finitial-access-intelligence-august-2024",{"type":2244,"url":3997},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fray",[3999,4000],"pypi:ray@2.45.0","pypi:ray@2.49.1",{"id":166,"slug":4002,"dossier":45,"summary":4003,"aliases":4004,"sourceIds":4007,"published":4008,"modified":4009,"checkedAt":7,"severity":4010,"references":4013,"versionKeys":4026,"packageCount":32,"repositoryCount":34},"ghsa-72m8-9m7m-h278-09927b5d","LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks",[4005,4006],"CVE-2026-59821","PYSEC-2026-3478",[166,4006],"2026-07-22T22:38:55Z","2026-07-23T15:11:26.912539142Z",[4011],{"type":2336,"score":4012},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:H\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4014,4016,4018,4020,4021,4023,4024],{"type":2247,"url":4015},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",{"type":2236,"url":4017},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59821",{"type":2247,"url":4019},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe50b4486d0f7aa0497185a1ebcdd2c91f1769eba",{"type":2244,"url":2856},{"type":2247,"url":4022},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.82.0-stable",{"type":2244,"url":2860},{"type":2236,"url":4025},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-72m8-9m7m-h278",[2864,2865,2866,2867],{"id":167,"slug":4028,"dossier":45,"summary":4029,"aliases":4030,"sourceIds":4033,"published":4034,"modified":4035,"checkedAt":7,"severity":4036,"references":4039,"versionKeys":4053,"packageCount":32,"repositoryCount":34},"ghsa-7488-6r32-c95q-deb7c5f3","LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback",[4031,4032],"CVE-2026-59822","PYSEC-2026-3479",[167,4032],"2026-07-22T22:38:33Z","2026-07-23T15:11:29.132983365Z",[4037],{"type":2336,"score":4038},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4040,4042,4044,4046,4048,4049,4050,4051],{"type":2247,"url":4041},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-7488-6r32-c95q",{"type":2236,"url":4043},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59822",{"type":2247,"url":4045},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F26463",{"type":2247,"url":4047},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F73869f0faf7d11ee21adcb5f91b8c33a340b6c2c",{"type":2244,"url":2856},{"type":2247,"url":3032},{"type":2244,"url":2860},{"type":2236,"url":4052},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7488-6r32-c95q",[2864,2865,2866,2867],{"id":168,"slug":4055,"dossier":45,"summary":4056,"aliases":4057,"sourceIds":4060,"published":4061,"modified":4062,"checkedAt":7,"severity":4063,"references":4065,"versionKeys":4103,"packageCount":32,"repositoryCount":601},"ghsa-7972-pg2x-xr59-8de5a611","vLLM has Hardcoded Trust Override in Model Files Enables RCE Despite Explicit User Opt-Out",[4058,4059],"CVE-2026-27893","PYSEC-2026-2297",[168,4059],"2026-03-27T00:16:22.333Z","2026-07-17T16:30:29.029310389Z",[4064],{"type":2232,"score":2399},[4066,4068,4070,4072,4074,4076,4077,4079,4081,4083,4085,4087,4089,4091,4093,4095,4097,4099,4101],{"type":2236,"url":4067},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7972-pg2x-xr59",{"type":2236,"url":4069},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27893",{"type":2513,"url":4071},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F36192",{"type":2241,"url":4073},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F00bd08edeee5dd4d4c13277c0114a464011acf72",{"type":2247,"url":4075},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-27893.json",{"type":2244,"url":2416},{"type":2247,"url":4078},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2297.yaml",{"type":2513,"url":4080},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2452055",{"type":2247,"url":4082},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-27893",{"type":2236,"url":4084},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8748",{"type":2236,"url":4086},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8747",{"type":2236,"url":4088},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:8746",{"type":2236,"url":4090},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":2236,"url":4092},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":2236,"url":4094},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19725",{"type":2236,"url":4096},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19724",{"type":2236,"url":4098},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10140",{"type":2236,"url":4100},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10141",{"type":2236,"url":4102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",[2434,2435],{"id":169,"slug":4105,"dossier":45,"summary":3081,"aliases":4106,"sourceIds":4109,"published":4110,"modified":4111,"checkedAt":7,"severity":4112,"references":4113,"versionKeys":4131,"packageCount":32,"repositoryCount":582},"ghsa-79v4-65xg-pq4g-b911b371",[4107,4108],"CVE-2024-12797","PYSEC-2026-1284",[169,4108],"2025-02-11T18:06:42Z","2026-07-07T17:57:01.916729628Z",[],[4114,4116,4118,4120,4122,4124,4125,4127,4129],{"type":2247,"url":4115},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",{"type":2236,"url":4117},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12797",{"type":2247,"url":4119},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F738d4f9fdeaad57660dcba50a619fafced3fd5e9",{"type":2247,"url":4121},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F798779d43494549b611233f92652f0da5328fbe7",{"type":2247,"url":4123},"https:\u002F\u002Fgithub.com\u002Fopenssl\u002Fopenssl\u002Fcommit\u002F87ebd203feffcf92ad5889df92f90bb0ee10a699",{"type":2244,"url":3092},{"type":2247,"url":4126},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20250211.txt",{"type":2244,"url":4128},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fcryptography",{"type":2236,"url":4130},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-79v4-65xg-pq4g",[3096,3097,3098],{"id":170,"slug":4133,"dossier":45,"summary":4134,"aliases":4135,"sourceIds":4138,"published":4139,"modified":4140,"checkedAt":7,"severity":4141,"references":4143,"versionKeys":4160,"packageCount":32,"repositoryCount":551},"ghsa-7f5h-v6xp-fcq8-9393173e","Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``",[4136,4137],"CVE-2025-62727","PYSEC-2026-1942",[170,4137],"2025-10-28T20:38:01Z","2026-07-07T17:56:07.620081354Z",[4142],{"type":2232,"score":2339},[4144,4146,4148,4150,4153,4155,4157,4158],{"type":2247,"url":4145},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",{"type":2236,"url":4147},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62727",{"type":2241,"url":4149},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F4ea6e22b489ec388d6004cfbca52dd5b147127c5",{"type":4151,"url":4152},"INTRODUCED","https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F69ed26a85956ef4bd0161807eb27abf49be7cd3c",{"type":2244,"url":4154},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette",{"type":2247,"url":4156},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F0.49.1",{"type":2244,"url":2318},{"type":2236,"url":4159},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7f5h-v6xp-fcq8",[2323,2324,4161,4162],"pypi:starlette@0.47.3","pypi:starlette@0.49.0",{"id":171,"slug":4164,"dossier":45,"summary":4165,"aliases":4166,"sourceIds":4169,"published":4170,"modified":4171,"checkedAt":7,"severity":4172,"references":4175,"versionKeys":4192,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[4167,4168],"CVE-2026-0994","PYSEC-2026-1805",[171,4168],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[4173],{"type":2336,"score":4174},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[4176,4178,4180,4182,4184,4186,4188,4190],{"type":2236,"url":4177},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":2247,"url":4179},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":2247,"url":4181},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":2247,"url":4183},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":2247,"url":4185},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":2244,"url":4187},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":2244,"url":4189},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":2236,"url":4191},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[4193,4194,4195,4196,4197,4198,4199,4200,4201],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":172,"slug":4203,"dossier":45,"summary":4204,"aliases":4205,"sourceIds":4208,"published":4209,"modified":4210,"checkedAt":7,"severity":4211,"references":4215,"versionKeys":4230,"packageCount":32,"repositoryCount":582},"ghsa-7h4p-rffg-7823-c840dc90","vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels",[4206,4207],"CVE-2026-54235","PYSEC-2026-3405",[172,4207],"2026-06-17T14:02:22Z","2026-07-17T16:45:18.824754082Z",[4212,4214],{"type":2232,"score":4213},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",{"type":2336,"score":3593},[4216,4218,4220,4222,4224,4226,4228,4229],{"type":2247,"url":4217},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2236,"url":4219},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54235",{"type":2247,"url":4221},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45116",{"type":2247,"url":4223},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd598d239737cfa37bcfcb98886ec3f3557fc7198",{"type":2236,"url":4225},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7h4p-rffg-7823",{"type":2247,"url":4227},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3405.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":173,"slug":4232,"dossier":45,"summary":4233,"aliases":4234,"sourceIds":4237,"published":4238,"modified":4239,"checkedAt":7,"severity":4240,"references":4243,"versionKeys":4264,"packageCount":32,"repositoryCount":582},"ghsa-7rgv-gqhr-fxg3-3d33cce2","xgrammar vulnerable to DoS via multi-layer nesting",[4235,4236],"CVE-2026-25048","PYSEC-2026-2322",[173,4236],"2026-03-05T16:16:15.853Z","2026-07-13T07:26:24.793294058Z",[4241,4242],{"type":2336,"score":3219},{"type":2232,"score":2339},[4244,4246,4248,4249,4251,4253,4255,4256,4258,4260,4262],{"type":2280,"url":4245},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Fsecurity\u002Fadvisories\u002FGHSA-7rgv-gqhr-fxg3",{"type":2236,"url":4247},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25048",{"type":2244,"url":3281},{"type":2236,"url":4250},"https:\u002F\u002Fgithub.com\u002Fmlc-ai\u002Fxgrammar\u002Freleases\u002Ftag\u002Fv0.1.32",{"type":2247,"url":4252},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25048",{"type":2247,"url":4254},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25048.json",{"type":2236,"url":4092},{"type":2236,"url":4257},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5809",{"type":2236,"url":4259},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6761",{"type":2236,"url":4261},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6762",{"type":2513,"url":4263},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2444840",[3287,4265,4266],"pypi:xgrammar@0.1.21","pypi:xgrammar@0.1.25",{"id":174,"slug":4268,"dossier":45,"summary":4269,"aliases":4270,"sourceIds":4273,"published":4274,"modified":4275,"checkedAt":7,"severity":4276,"references":4278,"versionKeys":4282,"packageCount":32,"repositoryCount":513},"ghsa-82w8-qh3p-5jfq-a05ef51e","Starlette: request.form() limits silently ignored for application\u002Fx-www-form-urlencoded enable DoS",[4271,4272],"CVE-2026-54283","PYSEC-2026-249",[174,4272],"2026-06-15T20:39:53Z","2026-06-27T11:26:15.727496147Z",[4277],{"type":2232,"score":2339},[4279,4281],{"type":2236,"url":4280},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-82w8-qh3p-5jfq",{"type":2244,"url":4154},[2322,2323,2324,4161,4162,4283,4284],"pypi:starlette@0.49.3","pypi:starlette@0.50.0",{"id":175,"slug":4286,"dossier":45,"summary":4287,"aliases":4288,"sourceIds":4292,"published":4293,"modified":4294,"checkedAt":7,"severity":4295,"references":4297,"versionKeys":4334,"packageCount":32,"repositoryCount":513},"ghsa-86qp-5c8j-p5mr-13e563cb","Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks",[4289,4290,4291],"CVE-2026-48710","PYSEC-2026-161","X41-2026-002",[175,4290],"2026-05-22T13:10:03Z","2026-08-07T12:46:17.536847233Z",[4296],{"type":2232,"score":2654},[4298,4300,4302,4304,4306,4308,4310,4312,4314,4316,4317,4319,4322,4324,4326,4328,4330,4332],{"type":2236,"url":4299},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-86qp-5c8j-p5mr",{"type":2236,"url":4301},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48710",{"type":2241,"url":4303},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002F764dab0dcfb9033d75442d7a359645c9f94648c6",{"type":2247,"url":4305},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2250,"url":4307},"https:\u002F\u002Fwww.secwest.net\u002Fstarlette",{"type":2247,"url":4309},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2026-48710",{"type":2247,"url":4311},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48710.json",{"type":2247,"url":4313},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette",{"type":2247,"url":4315},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-161.yaml",{"type":2244,"url":4154},{"type":2247,"url":4318},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2481742",{"type":4320,"url":4321},"DETECTION","https:\u002F\u002Fbadhost.org\u002F",{"type":2247,"url":4323},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48710",{"type":2247,"url":4325},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:51357",{"type":2247,"url":4327},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:44696",{"type":2247,"url":4329},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:43038",{"type":2250,"url":4331},"https:\u002F\u002Fostif.org\u002Fdisclosing-the-badhost-vulnerability-in-starlette\u002F",{"type":2236,"url":4333},"https:\u002F\u002Fwww.x41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette\u002F",[2322,2323,2324,4161,4162,4283,4284],{"id":176,"slug":4336,"dossier":45,"summary":4337,"aliases":4338,"sourceIds":4342,"published":4343,"modified":4344,"checkedAt":7,"severity":4345,"references":4349,"versionKeys":4371,"packageCount":32,"repositoryCount":532},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[4339,4340,4341],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[176,4341],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[4346,4347],{"type":2232,"score":2504},{"type":2336,"score":4348},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4350,4352,4354,4356,4358,4360,4361,4363,4365,4367,4369],{"type":2236,"url":4351},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":2247,"url":4353},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":2247,"url":4355},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":2247,"url":4357},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":2247,"url":4359},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":2244,"url":2520},{"type":2247,"url":4362},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":2247,"url":4364},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":2247,"url":4366},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":2244,"url":4368},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":2236,"url":4370},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[2532,2533,2534,4372,4373],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":177,"slug":4375,"dossier":45,"summary":4376,"aliases":4377,"sourceIds":4380,"published":4381,"modified":4382,"checkedAt":7,"severity":4383,"references":4386,"versionKeys":4401,"packageCount":32,"repositoryCount":582},"ghsa-8fr4-5q9j-m8gm-9a59ba60","vLLM vulnerable to remote code execution via transformers_utils\u002Fget_config",[4378,4379],"CVE-2025-66448","PYSEC-2026-2015",[177,4379],"2025-12-02T17:34:16Z","2026-07-17T16:30:30.600907369Z",[4384],{"type":2232,"score":4385},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4387,4389,4391,4393,4395,4397,4399,4400],{"type":2247,"url":4388},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2236,"url":4390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66448",{"type":2247,"url":4392},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F28126",{"type":2247,"url":4394},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fffb08379d8870a1a81ba82b72797f196838d0c86",{"type":2236,"url":4396},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8fr4-5q9j-m8gm",{"type":2247,"url":4398},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2015.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":178,"slug":4403,"dossier":45,"summary":4404,"aliases":4405,"sourceIds":4408,"published":4409,"modified":4410,"checkedAt":7,"severity":4411,"references":4414,"versionKeys":4433,"packageCount":32,"repositoryCount":32},"ghsa-8jr5-v98p-w75m-be5fb565","vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations",[4406,4407],"CVE-2026-12491","PYSEC-2026-3406",[178,4407],"2026-06-17T14:02:42Z","2026-07-17T16:45:18.723841391Z",[4412],{"type":2232,"score":4413},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:L",[4415,4417,4419,4421,4423,4425,4427,4429,4431,4432],{"type":2247,"url":4416},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2236,"url":4418},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12491",{"type":2247,"url":4420},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F44974",{"type":2247,"url":4422},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fcf1c90672404548aa3bc51f92c4745576a65ee26",{"type":2247,"url":4424},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-12491",{"type":2247,"url":4426},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2489786",{"type":2236,"url":4428},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8jr5-v98p-w75m",{"type":2247,"url":4430},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3406.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2435],{"id":179,"slug":4435,"dossier":45,"summary":4436,"aliases":4437,"sourceIds":4440,"published":4441,"modified":4442,"checkedAt":7,"severity":4443,"references":4445,"versionKeys":4455,"packageCount":32,"repositoryCount":513},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[4438,4439],"CVE-2026-59885","PYSEC-2026-3456",[179,4439],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[4444],{"type":2232,"score":2339},[4446,4448,4450,4452,4453],{"type":2236,"url":4447},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":2236,"url":4449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":2241,"url":4451},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":2244,"url":3572},{"type":2236,"url":4454},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[3580,4456],"pypi:pyasn1@0.6.3",{"id":180,"slug":4458,"dossier":45,"summary":4459,"aliases":4460,"sourceIds":4463,"published":4464,"modified":4465,"checkedAt":7,"severity":4466,"references":4469,"versionKeys":4488,"packageCount":32,"repositoryCount":582},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[4461,4462],"CVE-2025-4565","PYSEC-2026-1806",[180,4462],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[4467],{"type":2336,"score":4468},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[4470,4472,4474,4476,4478,4479,4481,4483,4485,4486],{"type":2247,"url":4471},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":2247,"url":4473},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":2236,"url":4475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":2247,"url":4477},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":2244,"url":4187},{"type":2247,"url":4480},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":2247,"url":4482},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":2247,"url":4484},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":2244,"url":4189},{"type":2236,"url":4487},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[4193,4195,4196],{"id":181,"slug":4490,"dossier":89,"summary":4491,"aliases":4492,"sourceIds":4496,"published":4497,"modified":4498,"checkedAt":7,"severity":4499,"references":4501,"versionKeys":4511,"packageCount":32,"repositoryCount":102},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[4493,4494,4495],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[181,4495],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[4500],{"type":2232,"score":2339},[4502,4504,4506,4507,4509,4510],{"type":2280,"url":4503},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":2236,"url":4505},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":2241,"url":2774},{"type":2247,"url":4508},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":2244,"url":2778},{"type":2236,"url":2780},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":182,"slug":4513,"dossier":45,"summary":4514,"aliases":4515,"sourceIds":4518,"published":4519,"modified":4520,"checkedAt":7,"severity":4521,"references":4523,"versionKeys":4536,"packageCount":32,"repositoryCount":601},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[4516,4517],"CVE-2025-5197","PYSEC-2026-1983",[182,4517],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[4522],{"type":2232,"score":2964},[4524,4526,4528,4530,4531,4533,4534],{"type":2236,"url":4525},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":2247,"url":4527},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":2247,"url":4529},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":2244,"url":2278},{"type":2247,"url":4532},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":2244,"url":2557},{"type":2236,"url":4535},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[2285,2286],{"id":183,"slug":4538,"dossier":45,"summary":4539,"aliases":4540,"sourceIds":4543,"published":4544,"modified":4545,"checkedAt":7,"severity":4546,"references":4549,"versionKeys":4577,"packageCount":32,"repositoryCount":582},"ghsa-94f4-hr76-p5j6-34e6691e","vLLM: OpenAI auth bypass",[4541,4542],"CVE-2026-48746","PYSEC-2026-226",[183,4542],"2026-06-16T17:36:41Z","2026-07-22T12:46:58.979336878Z",[4547],{"type":2232,"score":4548},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",[4550,4552,4554,4556,4558,4560,4561,4563,4565,4567,4568,4569,4571,4573,4574,4575],{"type":2236,"url":4551},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-94f4-hr76-p5j6",{"type":2236,"url":4553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48746",{"type":2513,"url":4555},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F43426",{"type":2236,"url":4557},"https:\u002F\u002Fx41-dsec.de\u002Flab\u002Fadvisories\u002Fx41-2026-002-starlette",{"type":2247,"url":4559},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48746.json",{"type":2244,"url":2416},{"type":2247,"url":4562},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-226.yaml",{"type":2247,"url":4564},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491581",{"type":2247,"url":4566},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48746",{"type":2247,"url":4329},{"type":2247,"url":2428},{"type":2247,"url":4570},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42142",{"type":2247,"url":4572},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42132",{"type":2247,"url":2695},{"type":2247,"url":2693},{"type":2247,"url":4576},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30089",[2434,2435,2642],{"id":184,"slug":4579,"dossier":45,"summary":4580,"aliases":4581,"sourceIds":4584,"published":4585,"modified":4586,"checkedAt":7,"severity":4587,"references":4590,"versionKeys":4601,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[4582,4583],"CVE-2025-53643","PYSEC-2026-1104",[184,4583],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[4588],{"type":2336,"score":4589},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[4591,4593,4595,4597,4598,4599],{"type":2247,"url":4592},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":2236,"url":4594},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":2241,"url":4596},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":4600},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[2348,2349,2350,2351],{"id":185,"slug":4603,"dossier":45,"summary":4604,"aliases":4605,"sourceIds":4608,"published":4609,"modified":4610,"checkedAt":7,"severity":4611,"references":4615,"versionKeys":4624,"packageCount":32,"repositoryCount":502},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[4606,4607],"CVE-2026-34518","PYSEC-2026-2100",[185,4607],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[4612,4614],{"type":2232,"score":4613},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":2336,"score":3160},[4616,4618,4620,4622,4623],{"type":2241,"url":4617},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":2236,"url":4619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":2241,"url":4621},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":186,"slug":4626,"dossier":45,"summary":4627,"aliases":4628,"sourceIds":4631,"published":4632,"modified":4633,"checkedAt":7,"severity":4634,"references":4638,"versionKeys":4657,"packageCount":32,"repositoryCount":582},"ghsa-98f3-hwg4-4rf7-af876537","vllm has Improper Resource Shutdown or Release",[4629,4630],"CVE-2026-9540","PYSEC-2026-3407",[186,4630],"2026-05-26T15:32:10Z","2026-07-13T16:43:04.792575152Z",[4635,4636],{"type":2232,"score":2303},{"type":2336,"score":4637},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4639,4641,4643,4645,4646,4648,4650,4652,4654,4655],{"type":2236,"url":4640},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9540",{"type":2247,"url":4642},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F37343",{"type":2247,"url":4644},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F37594",{"type":2244,"url":2416},{"type":2247,"url":4647},"https:\u002F\u002Fingero.io\u002Fdebugging-vllm-latency-minimax-ollama-mcp",{"type":2247,"url":4649},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F814645",{"type":2247,"url":4651},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601",{"type":2247,"url":4653},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F365601\u002Fcti",{"type":2244,"url":2412},{"type":2236,"url":4656},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-98f3-hwg4-4rf7",[2434,2435,2642],{"id":187,"slug":4659,"dossier":45,"summary":4660,"aliases":4661,"sourceIds":4664,"published":4665,"modified":4666,"checkedAt":7,"severity":4667,"references":4669,"versionKeys":4681,"packageCount":32,"repositoryCount":32},"ghsa-9hcf-v7m4-6m2j-d85c17a2","vLLM allows clients to crash the openai server with invalid regex",[4662,4663],"CVE-2025-48943","PYSEC-2025-55",[187,4663],"2025-05-28T19:42:12Z","2026-08-07T08:12:07.476205432Z",[4668],{"type":2232,"score":2682},[4670,4672,4674,4676,4677,4678,4680],{"type":2236,"url":4671},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9hcf-v7m4-6m2j",{"type":2236,"url":4673},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48943",{"type":2513,"url":4675},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F17313",{"type":2513,"url":3874},{"type":2241,"url":3876},{"type":2247,"url":4679},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-55.yaml",{"type":2244,"url":2416},[2642],{"id":188,"slug":4683,"dossier":45,"summary":4684,"aliases":4685,"sourceIds":4688,"published":4689,"modified":4690,"checkedAt":7,"severity":4691,"references":4694,"versionKeys":4713,"packageCount":32,"repositoryCount":532},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[4686,4687],"CVE-2024-47081","PYSEC-2026-1872",[188,4687],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[4692],{"type":2232,"score":4693},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[4695,4697,4699,4701,4703,4705,4707,4709,4711],{"type":2247,"url":4696},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":2236,"url":4698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":2247,"url":4700},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":2241,"url":4702},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":2244,"url":4704},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":2247,"url":4706},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":2247,"url":4708},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":2244,"url":4710},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":2236,"url":4712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[4714,4715],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":189,"slug":4717,"dossier":89,"summary":4718,"aliases":4719,"sourceIds":4723,"published":4724,"modified":4725,"checkedAt":7,"severity":4726,"references":4728,"versionKeys":4741,"packageCount":32,"repositoryCount":102},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[4720,4721,4722],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[189,4722],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[4727],{"type":2232,"score":2339},[4729,4731,4733,4735,4737,4739,4740],{"type":2280,"url":4730},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":2236,"url":4732},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":2241,"url":4734},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":2241,"url":4736},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":2247,"url":4738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":2244,"url":2778},{"type":2236,"url":3475},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":190,"slug":4743,"dossier":45,"summary":4744,"aliases":4745,"sourceIds":4748,"published":4749,"modified":4750,"checkedAt":7,"severity":4751,"references":4754,"versionKeys":4769,"packageCount":32,"repositoryCount":32},"ghsa-9pcc-gvx5-r5wm-4c73fdb6","Remote Code Execution Vulnerability in vLLM Multi-Node Cluster Configuration",[4746,4747],"CVE-2025-30165","PYSEC-2026-2017",[190,4747],"2025-05-06T16:38:35Z","2026-08-07T08:12:19.063707308Z",[4752],{"type":2232,"score":4753},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4755,4757,4759,4761,4763,4764,4766,4768],{"type":2247,"url":4756},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2236,"url":4758},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-30165",{"type":2236,"url":4760},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9pcc-gvx5-r5wm",{"type":2247,"url":4762},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2017.yaml",{"type":2244,"url":2416},{"type":2247,"url":4765},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L295-L301",{"type":2247,"url":4767},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002Fc21b99b91241409c2fdf9f3f8c542e8748b317be\u002Fvllm\u002Fdistributed\u002Fdevice_communicators\u002Fshm_broadcast.py#L468-L470",{"type":2244,"url":2412},[2642],{"id":191,"slug":4771,"dossier":45,"summary":4772,"aliases":4773,"sourceIds":4776,"published":4777,"modified":4778,"checkedAt":7,"severity":4779,"references":4782,"versionKeys":4799,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[4774,4775],"CVE-2024-35195","PYSEC-2026-1873",[191,4775],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[4780],{"type":2232,"score":4781},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[4783,4785,4787,4789,4791,4792,4794,4796,4797],{"type":2247,"url":4784},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":2236,"url":4786},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":2247,"url":4788},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":2241,"url":4790},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":2244,"url":4704},{"type":2247,"url":4793},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":2247,"url":4795},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":2244,"url":4710},{"type":2236,"url":4798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[4714],{"id":192,"slug":4801,"dossier":45,"summary":4802,"aliases":4803,"sourceIds":4806,"published":4807,"modified":4808,"checkedAt":7,"severity":4809,"references":4813,"versionKeys":4819,"packageCount":32,"repositoryCount":502},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[4804,4805],"CVE-2026-54280","PYSEC-2026-2113",[192,4805],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[4810,4812],{"type":2336,"score":4811},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":2339},[4814,4816,4818],{"type":2236,"url":4815},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":2241,"url":4817},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":193,"slug":4821,"dossier":45,"summary":4822,"aliases":4823,"sourceIds":4826,"published":4827,"modified":4828,"checkedAt":7,"severity":4829,"references":4832,"versionKeys":4842,"packageCount":32,"repositoryCount":551},"ghsa-c38f-wx89-p2xg-d717e000","UltraJSON has a Memory Leak in ujson.dump() on Write Failure",[4824,4825],"CVE-2026-44660","PYSEC-2026-2293",[193,4825],"2026-05-12T22:25:11Z","2026-07-13T07:26:16.152348068Z",[4830,4831],{"type":2232,"score":2339},{"type":2336,"score":3219},[4833,4835,4837,4839,4840],{"type":2241,"url":4834},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c38f-wx89-p2xg",{"type":2236,"url":4836},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44660",{"type":2241,"url":4838},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F82af1d0ac01d09aa40c887b460d44b9d9f4bccd9",{"type":2244,"url":2665},{"type":2236,"url":4841},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.1",[2669,2670],{"id":194,"slug":4844,"dossier":45,"summary":4845,"aliases":4846,"sourceIds":4849,"published":4850,"modified":4851,"checkedAt":7,"severity":4852,"references":4856,"versionKeys":4867,"packageCount":32,"repositoryCount":502},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[4847,4848],"CVE-2026-34525","PYSEC-2026-2103",[194,4848],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[4853,4855],{"type":2336,"score":4854},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":2232,"score":2449},[4857,4859,4861,4863,4865,4866],{"type":2241,"url":4858},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":2236,"url":4860},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":2241,"url":4862},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":2241,"url":4864},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":195,"slug":4869,"dossier":45,"summary":4870,"aliases":4871,"sourceIds":4874,"published":4875,"modified":4876,"checkedAt":7,"severity":4877,"references":4880,"versionKeys":4892,"packageCount":32,"repositoryCount":32},"ghsa-c65p-x677-fgj6-db33633a","vLLM has a Weakness in MultiModalHasher Image Hashing Implementation",[4872,4873],"CVE-2025-46722","PYSEC-2025-43",[195,4873],"2025-05-28T18:03:41Z","2026-08-07T08:12:03.917531780Z",[4878],{"type":2232,"score":4879},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:L",[4881,4883,4885,4887,4889,4891],{"type":2236,"url":4882},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-c65p-x677-fgj6",{"type":2236,"url":4884},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-46722",{"type":2247,"url":4886},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F17378",{"type":2241,"url":4888},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F99404f53c72965b41558aceb1bc2380875f5d848",{"type":2247,"url":4890},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-43.yaml",{"type":2244,"url":2416},[2642],{"id":196,"slug":4894,"dossier":45,"summary":4895,"aliases":4896,"sourceIds":4900,"published":4901,"modified":4902,"checkedAt":7,"severity":4903,"references":4908,"versionKeys":4924,"packageCount":32,"repositoryCount":601},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[4897,4898,4899],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[196],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[4904,4906],{"type":2232,"score":4905},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2336,"score":4907},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[4909,4911,4913,4915,4916,4918,4920,4922],{"type":2236,"url":4910},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":2247,"url":4912},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":2247,"url":4914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":2244,"url":2520},{"type":2247,"url":4917},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":2247,"url":4919},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":2247,"url":4921},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":2247,"url":4923},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[2532,2533],{"id":197,"slug":4926,"dossier":45,"summary":4927,"aliases":4928,"sourceIds":4931,"published":4932,"modified":4933,"checkedAt":7,"severity":4934,"references":4936,"versionKeys":4952,"packageCount":32,"repositoryCount":34},"ghsa-c8rr-9gxc-jprv-33d752b4","UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop",[4929,4930],"CVE-2026-32875","PYSEC-2026-2292",[197,4930],"2026-03-18T13:01:24Z","2026-07-13T07:26:19.649502948Z",[4935],{"type":2232,"score":2339},[4937,4939,4941,4943,4945,4946,4948,4950],{"type":2280,"url":4938},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-c8rr-9gxc-jprv",{"type":2236,"url":4940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32875",{"type":2513,"url":4942},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fissues\u002F700",{"type":2241,"url":4944},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F486bd4553dc471a1de11613bc7347a6b318e37ea",{"type":2244,"url":2665},{"type":2247,"url":4947},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32875",{"type":2247,"url":4949},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32875.json",{"type":2513,"url":4951},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449400",[2669],{"id":198,"slug":4954,"dossier":45,"summary":4955,"aliases":4956,"sourceIds":4960,"published":4961,"modified":4962,"checkedAt":7,"severity":4963,"references":4967,"versionKeys":5004,"packageCount":32,"repositoryCount":384},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[4957,4958,4959],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[198,4959],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[4964,4966],{"type":2336,"score":4965},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2232,"score":2339},[4968,4970,4972,4974,4976,4978,4979,4981,4983,4985,4987,4989,4991,4993,4994,4996,4997,4998,5000,5002],{"type":2247,"url":4969},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":2236,"url":4971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":2247,"url":4973},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":2247,"url":4975},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":2247,"url":4977},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":2244,"url":2778},{"type":2247,"url":4980},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":2247,"url":4982},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":2247,"url":4984},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":2236,"url":4986},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":2236,"url":4988},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":2236,"url":4990},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":2236,"url":4992},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":2236,"url":4102},{"type":2236,"url":4995},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":2236,"url":2951},{"type":2236,"url":2949},{"type":2236,"url":4999},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":2236,"url":5001},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":2236,"url":5003},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2782,2783,2784,2785,2786,2787,2788],{"id":199,"slug":5006,"dossier":45,"summary":5007,"aliases":5008,"sourceIds":5011,"published":5012,"modified":5013,"checkedAt":7,"severity":5014,"references":5017,"versionKeys":5034,"packageCount":32,"repositoryCount":601},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[5009,5010],"CVE-2025-27516","PYSEC-2026-1471",[199,5010],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[5015],{"type":2336,"score":5016},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5018,5020,5022,5024,5026,5028,5030,5032],{"type":2247,"url":5019},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":2236,"url":5021},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":2241,"url":5023},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":2244,"url":5025},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":2247,"url":5027},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":2247,"url":5029},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":2244,"url":5031},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":2236,"url":5033},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[5035,5036],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":200,"slug":5038,"dossier":45,"summary":5039,"aliases":5040,"sourceIds":5043,"published":5044,"modified":5045,"checkedAt":7,"severity":5046,"references":5049,"versionKeys":5064,"packageCount":32,"repositoryCount":5066},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[5041,5042],"CVE-2026-69244","PYSEC-2026-3545",[200,5042],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[5047],{"type":2336,"score":5048},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5050,5052,5054,5056,5057,5059,5060,5062],{"type":2247,"url":5051},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2247,"url":5053},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":2247,"url":5055},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":2244,"url":2344},{"type":2247,"url":5058},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":2244,"url":3170},{"type":2236,"url":5061},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":2236,"url":5063},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[2348,2349,2350,2351,2352,2353,2354,2355,5065],"pypi:aiohttp@3.14.1",11,{"id":201,"slug":5068,"dossier":45,"summary":5069,"aliases":5070,"sourceIds":5074,"published":5075,"modified":5076,"checkedAt":7,"severity":5077,"references":5081,"versionKeys":5097,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[5071,5072,5073],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[201,5073],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[5078,5079],{"type":2232,"score":2399},{"type":2336,"score":5080},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5082,5084,5086,5088,5089,5091,5093,5095],{"type":2236,"url":5083},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":2247,"url":5085},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":2247,"url":5087},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":2244,"url":3373},{"type":2247,"url":5090},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":2247,"url":5092},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":2244,"url":5094},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":2236,"url":5096},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[3379],{"id":202,"slug":5099,"dossier":45,"summary":5100,"aliases":5101,"sourceIds":5105,"published":5106,"modified":5107,"checkedAt":7,"severity":5108,"references":5113,"versionKeys":5131,"packageCount":32,"repositoryCount":601},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[5102,5103,5104],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[202],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[5109,5111],{"type":2232,"score":5110},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2336,"score":5112},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[5114,5116,5118,5120,5122,5124,5125,5127,5129],{"type":2236,"url":5115},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":2247,"url":5117},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":2247,"url":5119},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":2247,"url":5121},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":2247,"url":5123},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":2244,"url":2520},{"type":2247,"url":5126},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":2247,"url":5128},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":2247,"url":5130},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[2532,2533],{"id":203,"slug":5133,"dossier":45,"summary":5134,"aliases":5135,"sourceIds":5138,"published":5139,"modified":5140,"checkedAt":7,"severity":5141,"references":5145,"versionKeys":5156,"packageCount":32,"repositoryCount":32},"ghsa-f96h-pmfr-66vw-6763f20e","Starlette Denial of service (DoS) via multipart\u002Fform-data",[5136,5137],"CVE-2024-47874","PYSEC-2026-1943",[203,5137],"2024-10-15T18:12:57Z","2026-07-07T17:57:05.823442628Z",[5142,5144],{"type":2232,"score":5143},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:N",{"type":2336,"score":3219},[5146,5148,5150,5152,5153,5154],{"type":2247,"url":5147},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",{"type":2236,"url":5149},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47874",{"type":2241,"url":5151},"https:\u002F\u002Fgithub.com\u002Fencode\u002Fstarlette\u002Fcommit\u002Ffd038f3070c302bff17ef7d173dbb0b007617733",{"type":2244,"url":2312},{"type":2244,"url":2318},{"type":2236,"url":5155},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f96h-pmfr-66vw",[2322],{"id":204,"slug":5158,"dossier":45,"summary":5159,"aliases":5160,"sourceIds":5163,"published":5164,"modified":5165,"checkedAt":7,"severity":5166,"references":5171,"versionKeys":5193,"packageCount":32,"repositoryCount":513},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[5161,5162],"CVE-2026-5241","PYSEC-2026-2290",[204,5162],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[5167,5169],{"type":2232,"score":5168},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":2232,"score":5170},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5172,5174,5176,5178,5179,5180,5182,5184,5185,5187,5189,5191],{"type":2236,"url":5173},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":2241,"url":5175},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":2236,"url":5177},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":2236,"url":4090},{"type":2247,"url":2428},{"type":2247,"url":5181},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":2513,"url":5183},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":2244,"url":2278},{"type":2247,"url":5186},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":2280,"url":5188},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":2247,"url":5190},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":2236,"url":5192},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[2285,2286,2287,2288,2289,2290,2291],{"id":205,"slug":5195,"dossier":45,"summary":5196,"aliases":5197,"sourceIds":5200,"published":5201,"modified":5202,"checkedAt":7,"severity":5203,"references":5206,"versionKeys":5219,"packageCount":32,"repositoryCount":32},"ghsa-fh2c-86xm-pm2x-ff1ac9ef","LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request",[5198,5199],"CVE-2024-8984","PYSEC-2026-1545",[205,5199],"2025-03-20T12:32:49Z","2026-07-07T17:56:56.562714379Z",[5204],{"type":2232,"score":5205},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[5207,5209,5211,5212,5214,5216,5217],{"type":2236,"url":5208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-8984",{"type":2247,"url":5210},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F4f49f836aa844ac9b6bfbeff27e6f6b2b9cf3f61",{"type":2244,"url":2856},{"type":2247,"url":5213},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fblob\u002F8c5ff150f6142608ffe968e4e68429f978fda187\u002Flitellm\u002Ftests\u002Ftest_spend_logs.py#L242",{"type":2247,"url":5215},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F554fc76b-3097-4223-b4cf-110b853e9355",{"type":2244,"url":2860},{"type":2236,"url":5218},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh2c-86xm-pm2x",[2864],{"id":206,"slug":5221,"dossier":45,"summary":5222,"aliases":5223,"sourceIds":5226,"published":5227,"modified":5228,"checkedAt":7,"severity":5229,"references":5232,"versionKeys":5243,"packageCount":32,"repositoryCount":532},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[5224,5225],"CVE-2025-69230","PYSEC-2026-1105",[206,5225],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[5230],{"type":2336,"score":5231},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[5233,5235,5237,5239,5240,5241],{"type":2247,"url":5234},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":2236,"url":5236},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":2241,"url":5238},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":5242},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[2348,2349,2350,2351,2352,2353,2354],{"id":207,"slug":5245,"dossier":89,"summary":5246,"aliases":5247,"sourceIds":5251,"published":5252,"modified":5253,"checkedAt":7,"severity":5254,"references":5257,"versionKeys":5271,"packageCount":32,"repositoryCount":102},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[5248,5249,5250],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[207,5250],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[5255],{"type":2232,"score":5256},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[5258,5260,5262,5264,5266,5267,5268,5269],{"type":2247,"url":5259},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":2236,"url":5261},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":2247,"url":5263},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":2247,"url":5265},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":2244,"url":2778},{"type":2247,"url":3475},{"type":2244,"url":3477},{"type":2236,"url":5270},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":208,"slug":5273,"dossier":45,"summary":5274,"aliases":5275,"sourceIds":5278,"published":5279,"modified":5280,"checkedAt":7,"severity":5281,"references":5284,"versionKeys":5295,"packageCount":32,"repositoryCount":32},"ghsa-fjcf-3j3r-78rp-3506a50a","LiteLLM Has an Improper Authorization Vulnerability",[5276,5277],"CVE-2025-0628","PYSEC-2026-1546",[208,5277],"2025-03-20T12:32:52Z","2026-07-07T17:56:36.033233141Z",[5282],{"type":2232,"score":5283},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5285,5287,5289,5290,5292,5293],{"type":2236,"url":5286},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-0628",{"type":2247,"url":5288},"https:\u002F\u002Fgithub.com\u002Fberriai\u002Flitellm\u002Fcommit\u002F566d9354aab4215091b2e51ad0333e948125fa1b",{"type":2244,"url":2856},{"type":2247,"url":5291},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6c0e2f75-2d03-42f9-9530-e16a973317fc",{"type":2244,"url":2860},{"type":2236,"url":5294},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fjcf-3j3r-78rp",[2864],{"id":209,"slug":5297,"dossier":45,"summary":5298,"aliases":5299,"sourceIds":5302,"published":5303,"modified":5304,"checkedAt":7,"severity":5305,"references":5307,"versionKeys":5320,"packageCount":32,"repositoryCount":582},"ghsa-fjrm-76x2-c4q4-c21dcb99","JWCrypto: JWE ZIP decompression bomb",[5300,5301],"CVE-2026-39373","PYSEC-2026-70",[209,5301],"2026-04-07T20:16:32.133Z","2026-06-06T00:30:08.711138560Z",[5306],{"type":2232,"score":2303},[5308,5310,5312,5314,5316,5318],{"type":2280,"url":5309},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fsecurity\u002Fadvisories\u002FGHSA-fjrm-76x2-c4q4",{"type":2236,"url":5311},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39373",{"type":2247,"url":5313},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Fcommit\u002F25db861d8b29434838669a94a843af03d29ea6ed",{"type":2244,"url":5315},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto",{"type":2247,"url":5317},"https:\u002F\u002Fgithub.com\u002Flatchset\u002Fjwcrypto\u002Freleases\u002Ftag\u002Fv1.5.7",{"type":2247,"url":5319},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fjwcrypto\u002FPYSEC-2026-70.yaml",[5321],"pypi:jwcrypto@1.5.6",{"id":210,"slug":5323,"dossier":45,"summary":3909,"aliases":5324,"sourceIds":5327,"published":5328,"modified":5329,"checkedAt":7,"severity":5330,"references":5333,"versionKeys":5344,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[5325,5326],"CVE-2025-1194","PYSEC-2026-1984",[210,5326],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[5331],{"type":2232,"score":5332},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5334,5336,5338,5339,5341,5342],{"type":2236,"url":5335},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":2247,"url":5337},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":2244,"url":2278},{"type":2247,"url":5340},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":2244,"url":2557},{"type":2236,"url":5343},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[2285],{"id":211,"slug":5346,"dossier":45,"summary":5347,"aliases":5348,"sourceIds":5351,"published":5352,"modified":5353,"checkedAt":7,"severity":5354,"references":5357,"versionKeys":5363,"packageCount":32,"repositoryCount":502},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[5349,5350],"CVE-2026-54278","PYSEC-2026-2111",[211,5350],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[5355,5356],{"type":2336,"score":2827},{"type":2232,"score":2339},[5358,5360,5361],{"type":2236,"url":5359},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":2244,"url":2344},{"type":2241,"url":5362},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[2348,2349,2350,2351,2352,2353,2354,2355],{"id":212,"slug":5365,"dossier":45,"summary":5366,"aliases":5367,"sourceIds":5370,"published":5371,"modified":5372,"checkedAt":7,"severity":5373,"references":5376,"versionKeys":5389,"packageCount":32,"repositoryCount":532},"ghsa-g6cj-pr64-35w5-fd75eedf","cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",[5368,5369],"CVE-2026-69247","PYSEC-2026-3552",[212,5369],"2026-08-03T21:17:00Z","2026-08-04T21:26:57.762682357Z",[5374],{"type":2336,"score":5375},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5377,5379,5381,5383,5384,5385,5387],{"type":2247,"url":5378},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2247,"url":5380},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F15369",{"type":2247,"url":5382},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F53fccd93413a8d7f07d6d8999681f27b75cffa3f",{"type":2244,"url":3092},{"type":2244,"url":4128},{"type":2236,"url":5386},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g6cj-pr64-35w5",{"type":2236,"url":5388},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69247",[3098,3099,3100,3101,5390,5391],"pypi:cryptography@48.0.1","pypi:cryptography@49.0.0",{"id":213,"slug":5393,"dossier":45,"summary":5394,"aliases":5395,"sourceIds":5398,"published":5399,"modified":5400,"checkedAt":7,"severity":5401,"references":5404,"versionKeys":5423,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[5396,5397],"CVE-2024-34062","PYSEC-2026-1976",[213,5397],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[5402],{"type":2232,"score":5403},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5405,5407,5409,5411,5413,5415,5417,5419,5421],{"type":2247,"url":5406},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":2236,"url":5408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":2247,"url":5410},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":2244,"url":5412},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":2247,"url":5414},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":2247,"url":5416},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":2247,"url":5418},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":2244,"url":5420},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":2236,"url":5422},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[5424],"pypi:tqdm@4.66.2",{"id":214,"slug":5426,"dossier":45,"summary":5427,"aliases":5428,"sourceIds":5431,"published":5432,"modified":5433,"checkedAt":7,"severity":5434,"references":5436,"versionKeys":5449,"packageCount":32,"repositoryCount":532},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[5429,5430],"CVE-2025-69229","PYSEC-2026-1106",[214,5430],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[5435],{"type":2336,"score":2827},[5437,5439,5441,5443,5445,5446,5447],{"type":2247,"url":5438},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":2236,"url":5440},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":2247,"url":5442},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":2247,"url":5444},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":5448},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[2348,2349,2350,2351,2352,2353,2354],{"id":215,"slug":5451,"dossier":89,"summary":5452,"aliases":5453,"sourceIds":5456,"published":5457,"modified":5458,"checkedAt":7,"severity":5459,"references":5464,"versionKeys":5474,"packageCount":32,"repositoryCount":5477},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[5454,5455],"CVE-2026-25645","PYSEC-2026-2275",[215,5455],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[5460,5462],{"type":2232,"score":5461},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":2232,"score":5463},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[5465,5467,5469,5471,5472],{"type":2236,"url":5466},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":2236,"url":5468},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":2241,"url":5470},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":2244,"url":4704},{"type":2236,"url":5473},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[4714,4715,5475,5476],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":216,"slug":5479,"dossier":89,"summary":5480,"aliases":5481,"sourceIds":5484,"published":5485,"modified":5486,"checkedAt":7,"severity":5487,"references":5489,"versionKeys":5500,"packageCount":32,"repositoryCount":102},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[5482,5483],"CVE-2025-66418","PYSEC-2026-1998",[216,5483],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[5488],{"type":2336,"score":2472},[5490,5492,5494,5496,5497,5498],{"type":2247,"url":5491},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":2236,"url":5493},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":2241,"url":5495},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":2244,"url":2481},{"type":2244,"url":2483},{"type":2236,"url":5499},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[2487,2488,2489,2490,2491],{"id":217,"slug":5502,"dossier":45,"summary":5503,"aliases":5504,"sourceIds":5507,"published":5508,"modified":5509,"checkedAt":7,"severity":5510,"references":5513,"versionKeys":5528,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[5505,5506],"CVE-2024-56201","PYSEC-2026-1472",[217,5506],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[5511,5512],{"type":2232,"score":3360},{"type":2336,"score":5016},[5514,5516,5518,5520,5522,5523,5525,5526],{"type":2247,"url":5515},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":2236,"url":5517},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":2247,"url":5519},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":2241,"url":5521},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":2244,"url":5025},{"type":2247,"url":5524},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":2244,"url":5031},{"type":2236,"url":5527},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[5035],{"id":218,"slug":5530,"dossier":45,"summary":5531,"aliases":5532,"sourceIds":5535,"published":5536,"modified":5537,"checkedAt":7,"severity":5538,"references":5541,"versionKeys":5553,"packageCount":32,"repositoryCount":582},"ghsa-grg2-63fw-f2qr-b9670d50","vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions",[5533,5534],"CVE-2026-22773","PYSEC-2026-143",[218,5534],"2026-01-10T07:16:03.527Z","2026-06-08T20:00:15.842086505Z",[5539,5540],{"type":2232,"score":2682},{"type":2232,"score":2339},[5542,5544,5546,5548,5550,5552],{"type":2280,"url":5543},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-grg2-63fw-f2qr",{"type":2236,"url":5545},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22773",{"type":2247,"url":5547},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F29881",{"type":2247,"url":5549},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F0ec84221718d920c3f46da879cc354f94b8fb59e",{"type":2247,"url":5551},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-143.yaml",{"type":2244,"url":2416},[2434,2435,2642],{"id":219,"slug":5555,"dossier":45,"summary":5556,"aliases":5557,"sourceIds":5560,"published":5561,"modified":5562,"checkedAt":7,"severity":5563,"references":5565,"versionKeys":5586,"packageCount":32,"repositoryCount":582},"ghsa-gx77-xgc2-4888-18e94d17","Ray's New Token Authentication is Disabled By Default",[5558,5559],"CVE-2025-34351","PYSEC-2026-518",[219,5559],"2025-11-27T03:30:26Z","2026-07-01T20:23:03.614509Z",[5564],{"type":2336,"score":3136},[5566,5568,5570,5571,5572,5574,5576,5578,5580,5581,5583,5584],{"type":2247,"url":5567},"https:\u002F\u002Fgithub.com\u002FJLLeitschuh\u002Fsecurity-research\u002Fsecurity\u002Fadvisories\u002FGHSA-w8vc-465m-jjw6",{"type":2236,"url":5569},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-34351",{"type":2247,"url":3979},{"type":2244,"url":3985},{"type":2247,"url":5573},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.52.0",{"type":2247,"url":5575},"https:\u002F\u002Fwww.cve.org\u002Fresourcessupport\u002Fallresources\u002Fcnarules#section_4-1_Vulnerability_Determination",{"type":2247,"url":5577},"https:\u002F\u002Fwww.linkedin.com\u002Fposts\u002Fjonathan-leitschuh_the-latest-piece-of-mind-bending-research-activity-7396976425997606912-qizE",{"type":2247,"url":5579},"https:\u002F\u002Fwww.oligo.security\u002Fblog\u002Fshadowray-2-0-attackers-turn-ai-against-itself-in-global-campaign-that-hijacks-ai-into-self-propagating-botnet",{"type":2247,"url":3989},{"type":2247,"url":5582},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fanyscale-ray-token-authentication-disabled-by-default-insecure-configuration",{"type":2244,"url":3997},{"type":2236,"url":5585},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gx77-xgc2-4888",[3999,4000,5587],"pypi:ray@2.50.1",{"id":220,"slug":5589,"dossier":89,"summary":5590,"aliases":5591,"sourceIds":5595,"published":5596,"modified":5597,"checkedAt":7,"severity":5598,"references":5601,"versionKeys":5613,"packageCount":32,"repositoryCount":5621},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[5592,5593,5594],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[220,5594],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[5599],{"type":2232,"score":5600},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[5602,5604,5606,5608,5610,5611],{"type":2280,"url":5603},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":2236,"url":5605},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":2241,"url":5607},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":2247,"url":5609},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":2244,"url":3373},{"type":2236,"url":5612},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[3379,3380,3381,5614,5615,5616,5617,5618,5619,5620],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":221,"slug":5623,"dossier":45,"summary":5624,"aliases":5625,"sourceIds":5626,"published":5627,"modified":5628,"checkedAt":7,"severity":5629,"references":5630,"versionKeys":5636,"packageCount":32,"repositoryCount":32},"ghsa-h4gh-qq45-vh27-43490265","pyca\u002Fcryptography has a vulnerable OpenSSL included in cryptography wheels",[],[221],"2024-09-03T21:59:48Z","2026-02-04T03:06:49.280647Z",[],[5631,5633,5634],{"type":2247,"url":5632},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-h4gh-qq45-vh27",{"type":2244,"url":3092},{"type":2247,"url":5635},"https:\u002F\u002Fopenssl-library.org\u002Fnews\u002Fsecadv\u002F20240903.txt",[3096],{"id":222,"slug":5638,"dossier":45,"summary":5639,"aliases":5640,"sourceIds":5643,"published":5644,"modified":5645,"checkedAt":7,"severity":5646,"references":5649,"versionKeys":5670,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[5641,5642],"CVE-2024-34064","PYSEC-2026-1474",[222,5642],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[5647],{"type":2232,"score":5648},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[5650,5652,5654,5656,5657,5659,5661,5663,5665,5667,5668],{"type":2247,"url":5651},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":2236,"url":5653},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":2241,"url":5655},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":2244,"url":5025},{"type":2247,"url":5658},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":2247,"url":5660},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":2247,"url":5662},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":2247,"url":5664},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":2247,"url":5666},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":2244,"url":5031},{"type":2236,"url":5669},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[5035],{"id":223,"slug":5672,"dossier":45,"summary":5673,"aliases":5674,"sourceIds":5677,"published":5678,"modified":5679,"checkedAt":7,"severity":5680,"references":5683,"versionKeys":5692,"packageCount":32,"repositoryCount":502},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[5675,5676],"CVE-2026-34513","PYSEC-2026-2095",[223,5676],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[5681,5682],{"type":2336,"score":2717},{"type":2232,"score":2339},[5684,5686,5688,5690,5691],{"type":2241,"url":5685},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":2236,"url":5687},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":2241,"url":5689},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":224,"slug":5694,"dossier":45,"summary":5695,"aliases":5696,"sourceIds":5699,"published":5700,"modified":5701,"checkedAt":7,"severity":5702,"references":5706,"versionKeys":5714,"packageCount":32,"repositoryCount":502},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[5697,5698],"CVE-2026-47265","PYSEC-2026-2105",[224,5698],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[5703,5705],{"type":2336,"score":5704},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":2232,"score":3327},[5707,5709,5711,5713],{"type":2241,"url":5708},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":2236,"url":5710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":2241,"url":5712},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":225,"slug":5716,"dossier":45,"summary":5717,"aliases":5718,"sourceIds":5721,"published":5722,"modified":5723,"checkedAt":7,"severity":5724,"references":5726,"versionKeys":5741,"packageCount":32,"repositoryCount":582},"ghsa-hgg8-fqqc-vfmw-ba9b1162","vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router",[5719,5720],"CVE-2026-54236","PYSEC-2026-3408",[225,5720],"2026-06-17T14:04:09Z","2026-07-20T13:45:32.249353382Z",[5725],{"type":2232,"score":4613},[5727,5729,5731,5733,5735,5737,5739,5740],{"type":2247,"url":5728},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2236,"url":5730},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54236",{"type":2247,"url":5732},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45119",{"type":2247,"url":5734},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F94923629729381d7f7c9efde72071a2441f7fd82",{"type":2236,"url":5736},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgg8-fqqc-vfmw",{"type":2247,"url":5738},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3408.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":226,"slug":5743,"dossier":45,"summary":5744,"aliases":5745,"sourceIds":5748,"published":5749,"modified":5750,"checkedAt":7,"severity":5751,"references":5757,"versionKeys":5775,"packageCount":32,"repositoryCount":582},"ghsa-hhrp-gw25-jr43-92599f57","Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)",[5746,5747],"CVE-2026-57516","PYSEC-2026-2273",[226,5747],"2026-07-01T17:16:37.390Z","2026-07-24T16:00:26.759843240Z",[5752,5753,5755],{"type":2232,"score":2399},{"type":2336,"score":5754},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2336,"score":5756},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5758,5760,5762,5764,5766,5768,5770,5771,5773],{"type":2241,"url":5759},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-hhrp-gw25-jr43",{"type":2236,"url":5761},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-57516",{"type":2241,"url":5763},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63469",{"type":2241,"url":5765},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F63470",{"type":2247,"url":5767},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F41443a18f9e6403a072de69098a279c23e2d943c",{"type":2247,"url":5769},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fray\u002FPYSEC-2026-2273.yaml",{"type":2244,"url":3985},{"type":2236,"url":5772},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.56.0",{"type":2236,"url":5774},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fray-unsafe-deserialization-rce-via-webdataset-reader",[3999,4000,5587],{"id":227,"slug":5777,"dossier":45,"summary":5778,"aliases":5779,"sourceIds":5782,"published":5783,"modified":5784,"checkedAt":7,"severity":5785,"references":5787,"versionKeys":5796,"packageCount":32,"repositoryCount":513},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[5780,5781],"CVE-2026-59886","PYSEC-2026-3457",[227,5781],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[5786],{"type":2232,"score":2339},[5788,5790,5792,5794,5795],{"type":2236,"url":5789},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":2236,"url":5791},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":2241,"url":5793},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":2244,"url":3572},{"type":2236,"url":4454},[3580,4456],{"id":228,"slug":5798,"dossier":45,"summary":5799,"aliases":5800,"sourceIds":5803,"published":5804,"modified":5805,"checkedAt":7,"severity":5806,"references":5811,"versionKeys":5817,"packageCount":32,"repositoryCount":502},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[5801,5802],"CVE-2026-54276","PYSEC-2026-2109",[228,5802],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[5807,5809],{"type":2336,"score":5808},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":2232,"score":5810},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[5812,5814,5816],{"type":2236,"url":5813},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":2241,"url":5815},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":229,"slug":5819,"dossier":45,"summary":5820,"aliases":5821,"sourceIds":5824,"published":5825,"modified":5826,"checkedAt":7,"severity":5827,"references":5829,"versionKeys":5842,"packageCount":32,"repositoryCount":582},"ghsa-hpv8-x276-m59f-6a62e8b6","vLLM Vulnerable to Remote DoS via Special-Token Placeholders",[5822,5823],"CVE-2026-44222","PYSEC-2026-3409",[229,5823],"2026-05-05T22:21:41Z","2026-07-17T16:30:29.072224452Z",[5828],{"type":2232,"score":2682},[5830,5832,5834,5836,5838,5840,5841],{"type":2247,"url":5831},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2236,"url":5833},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44222",{"type":2247,"url":5835},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F32656",{"type":2236,"url":5837},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hpv8-x276-m59f",{"type":2247,"url":5839},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-3409.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":230,"slug":5844,"dossier":45,"summary":5845,"aliases":5846,"sourceIds":5849,"published":5850,"modified":5851,"checkedAt":7,"severity":5852,"references":5856,"versionKeys":5872,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[5847,5848],"CVE-2024-11394","PYSEC-2024-229",[230,5848],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[5853,5855],{"type":2232,"score":5854},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2232,"score":2399},[5857,5859,5861,5863,5864,5866,5868,5870],{"type":2236,"url":5858},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":2247,"url":5860},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":2247,"url":5862},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":2244,"url":2278},{"type":2247,"url":5865},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":2247,"url":5867},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":2236,"url":5869},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":2236,"url":5871},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[2285],{"id":231,"slug":5874,"dossier":45,"summary":5875,"aliases":5876,"sourceIds":5878,"published":5879,"modified":5880,"checkedAt":7,"severity":5881,"references":5884,"versionKeys":5892,"packageCount":32,"repositoryCount":32},"ghsa-j828-28rj-hfhp-e66dafb9","vLLM vulnerable to Regular Expression Denial of Service",[5877],"CVE-2025-71379",[231],"2025-05-28T17:50:06Z","2026-08-07T08:12:15.960396520Z",[5882],{"type":2232,"score":5883},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[5885,5887,5889,5891],{"type":2247,"url":5886},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-j828-28rj-hfhp",{"type":2247,"url":5888},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F18454",{"type":2247,"url":5890},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F4fc1bf813ad80172c1db31264beaef7d93fe0601",{"type":2244,"url":2416},[2642],{"id":232,"slug":5894,"dossier":45,"summary":5895,"aliases":5896,"sourceIds":5899,"published":5900,"modified":5901,"checkedAt":7,"severity":5902,"references":5907,"versionKeys":5924,"packageCount":32,"repositoryCount":502},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[5897,5898],"CVE-2026-34993","PYSEC-2026-2104",[232,5898],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[5903,5905],{"type":2232,"score":5904},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":2232,"score":5906},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[5908,5910,5912,5914,5915,5917,5919,5920,5921,5922],{"type":2241,"url":5909},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":2236,"url":5911},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":2241,"url":5913},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":2244,"url":2344},{"type":2247,"url":5916},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":2247,"url":5918},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":2236,"url":4092},{"type":2236,"url":5177},{"type":2236,"url":4090},{"type":2513,"url":5923},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[2348,2349,2350,2351,2352,2353,2354,2355],{"id":233,"slug":5926,"dossier":45,"summary":5927,"aliases":5928,"sourceIds":5931,"published":5932,"modified":5933,"checkedAt":7,"severity":5934,"references":5936,"versionKeys":5947,"packageCount":32,"repositoryCount":532},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[5929,5930],"CVE-2025-69227","PYSEC-2026-1107",[233,5930],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[5935],{"type":2336,"score":2827},[5937,5939,5941,5943,5944,5945],{"type":2247,"url":5938},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":2236,"url":5940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":2247,"url":5942},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":5946},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[2348,2349,2350,2351,2352,2353,2354],{"id":234,"slug":5949,"dossier":45,"summary":5950,"aliases":5951,"sourceIds":5954,"published":5955,"modified":5956,"checkedAt":7,"severity":5957,"references":5960,"versionKeys":5969,"packageCount":32,"repositoryCount":34},"ghsa-jjhc-v7c2-5hh6-5d2c89e6","LiteLLM: Authentication bypass via OIDC userinfo cache key collision",[5952,5953],"CVE-2026-35030","PYSEC-2026-390",[234,5953],"2026-04-03T21:59:50Z","2026-07-01T20:22:56.400828Z",[5958],{"type":2336,"score":5959},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[5961,5963,5965,5966,5967],{"type":2247,"url":5962},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fsecurity\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",{"type":2236,"url":5964},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-35030",{"type":2244,"url":2856},{"type":2244,"url":2860},{"type":2236,"url":5968},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjhc-v7c2-5hh6",[2864,2865,2866,2867],{"id":235,"slug":5971,"dossier":89,"summary":5972,"aliases":5973,"sourceIds":5977,"published":5978,"modified":5979,"checkedAt":7,"severity":5980,"references":5982,"versionKeys":5996,"packageCount":32,"repositoryCount":102},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[5974,5975,5976],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[235,5976],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[5981],{"type":2232,"score":2339},[5983,5985,5987,5989,5991,5992,5993,5994],{"type":2247,"url":5984},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":2236,"url":5986},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":2247,"url":5988},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":2247,"url":5990},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":2244,"url":2778},{"type":2247,"url":3475},{"type":2244,"url":3477},{"type":2236,"url":5995},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":236,"slug":5998,"dossier":45,"summary":5999,"aliases":6000,"sourceIds":6003,"published":6004,"modified":6005,"checkedAt":7,"severity":6006,"references":6008,"versionKeys":6021,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[6001,6002],"CVE-2025-3264","PYSEC-2026-1985",[236,6002],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[6007],{"type":2232,"score":2964},[6009,6011,6013,6015,6016,6018,6019],{"type":2236,"url":6010},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":2247,"url":6012},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":2247,"url":6014},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":2244,"url":2278},{"type":2247,"url":6017},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":2244,"url":2557},{"type":2236,"url":6020},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[2285],{"id":237,"slug":6023,"dossier":45,"summary":6024,"aliases":6025,"sourceIds":6028,"published":6029,"modified":6030,"checkedAt":7,"severity":6031,"references":6034,"versionKeys":6042,"packageCount":32,"repositoryCount":513},"ghsa-jp82-jpqv-5vv3-4d50530e","Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname",[6026,6027],"CVE-2026-54282","PYSEC-2026-248",[237,6027],"2026-06-15T20:38:08Z","2026-07-15T22:30:44.498280076Z",[6032,6033],{"type":2232,"score":3792},{"type":2232,"score":2449},[6035,6037,6039,6040],{"type":2236,"url":6036},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-jp82-jpqv-5vv3",{"type":2236,"url":6038},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54282",{"type":2244,"url":4154},{"type":2247,"url":6041},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fstarlette\u002FPYSEC-2026-248.yaml",[2322,2323,2324,4161,4162,4283,4284],{"id":238,"slug":6044,"dossier":45,"summary":6045,"aliases":6046,"sourceIds":6049,"published":6050,"modified":6051,"checkedAt":7,"severity":6052,"references":6055,"versionKeys":6088,"packageCount":32,"repositoryCount":532},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[6047,6048],"CVE-2026-30922","PYSEC-2026-2263",[238,6048],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[6053,6054],{"type":2232,"score":5205},{"type":2232,"score":2339},[6056,6058,6060,6062,6064,6065,6067,6069,6071,6073,6074,6076,6078,6080,6082,6084,6086],{"type":2280,"url":6057},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":2236,"url":6059},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":2247,"url":6061},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":2241,"url":6063},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":2247,"url":4986},{"type":2247,"url":6066},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":2247,"url":6068},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":2247,"url":6070},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":2247,"url":6072},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":2247,"url":4090},{"type":2247,"url":6075},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":2247,"url":6077},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":2247,"url":6079},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":2247,"url":6081},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":2247,"url":6083},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":2247,"url":6085},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":2247,"url":6087},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[3580],{"id":239,"slug":6090,"dossier":45,"summary":6091,"aliases":6092,"sourceIds":6095,"published":6096,"modified":6097,"checkedAt":7,"severity":6098,"references":6100,"versionKeys":6113,"packageCount":32,"repositoryCount":513},"ghsa-jwv3-5hgf-82ww-d34fc541","python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",[6093,6094],"CVE-2026-69249","PYSEC-2026-3553",[239,6094],"2026-08-03T21:26:50Z","2026-08-05T08:56:56.745489939Z",[6099],{"type":2336,"score":3219},[6101,6103,6105,6107,6108,6109,6111],{"type":2247,"url":6102},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2247,"url":6104},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14960",{"type":2247,"url":6106},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4a12cf49675a184e47f912b00b04f3a629283582",{"type":2244,"url":3092},{"type":2244,"url":4128},{"type":2236,"url":6110},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jwv3-5hgf-82ww",{"type":2236,"url":6112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69249",[3096,3097,3098,3099,3100,3101,5390],{"id":240,"slug":6115,"dossier":45,"summary":6116,"aliases":6117,"sourceIds":6120,"published":6121,"modified":6122,"checkedAt":7,"severity":6123,"references":6126,"versionKeys":6139,"packageCount":32,"repositoryCount":513},"ghsa-m2h6-j472-rp4c-112d8b91","python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",[6118,6119],"CVE-2026-69248","PYSEC-2026-3554",[240,6119],"2026-08-03T21:26:57Z","2026-08-05T08:56:57.182506215Z",[6124],{"type":2336,"score":6125},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6127,6129,6131,6133,6134,6135,6137],{"type":2247,"url":6128},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2247,"url":6130},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fpull\u002F14888",{"type":2247,"url":6132},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F4d035a4225965edeffd312079a510ef25fcfdcb2",{"type":2244,"url":3092},{"type":2244,"url":4128},{"type":2236,"url":6136},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m2h6-j472-rp4c",{"type":2236,"url":6138},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69248",[3096,3097,3098,3099,3100,3101,5390],{"id":241,"slug":6141,"dossier":45,"summary":6142,"aliases":6143,"sourceIds":6146,"published":6147,"modified":6148,"checkedAt":7,"severity":6149,"references":6151,"versionKeys":6162,"packageCount":32,"repositoryCount":513},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[6144,6145],"CVE-2026-59884","PYSEC-2026-3455",[241,6145],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[6150],{"type":2232,"score":2339},[6152,6154,6156,6158,6159,6160],{"type":2236,"url":6153},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":2236,"url":6155},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":2241,"url":6157},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":2244,"url":3572},{"type":2236,"url":4454},{"type":2247,"url":6161},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[3580,4456],{"id":242,"slug":6164,"dossier":45,"summary":6165,"aliases":6166,"sourceIds":6169,"published":6170,"modified":6171,"checkedAt":7,"severity":6172,"references":6177,"versionKeys":6186,"packageCount":32,"repositoryCount":502},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[6167,6168],"CVE-2026-34516","PYSEC-2026-2098",[242,6168],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[6173,6174,6175],{"type":2232,"score":2339},{"type":2336,"score":2827},{"type":2336,"score":6176},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[6178,6180,6182,6184,6185],{"type":2241,"url":6179},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":2236,"url":6181},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":2241,"url":6183},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":243,"slug":6188,"dossier":45,"summary":6189,"aliases":6190,"sourceIds":6193,"published":6194,"modified":6195,"checkedAt":7,"severity":6196,"references":6199,"versionKeys":6205,"packageCount":32,"repositoryCount":502},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[6191,6192],"CVE-2026-50269","PYSEC-2026-2106",[243,6192],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[6197,6198],{"type":2336,"score":2447},{"type":2232,"score":2339},[6200,6202,6204],{"type":2236,"url":6201},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":2241,"url":6203},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":2244,"url":2344},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":244,"slug":6207,"dossier":45,"summary":6208,"aliases":6209,"sourceIds":6212,"published":6213,"modified":6214,"checkedAt":7,"severity":6215,"references":6219,"versionKeys":6227,"packageCount":32,"repositoryCount":532},"ghsa-m959-cc7f-wv43-3b497c67","cryptography has incomplete DNS name constraint enforcement on peer names",[6210,6211],"CVE-2026-34073","PYSEC-2026-35",[244,6211],"2026-03-27T19:56:21Z","2026-06-05T18:00:13.915417385Z",[6216,6217],{"type":2232,"score":2449},{"type":2336,"score":6218},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[6220,6222,6224,6225],{"type":2236,"url":6221},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-m959-cc7f-wv43",{"type":2236,"url":6223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34073",{"type":2244,"url":3092},{"type":2247,"url":6226},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-35.yaml",[3096,3097,3098,3099,3100,3101],{"id":245,"slug":6229,"dossier":45,"summary":6230,"aliases":6231,"sourceIds":6234,"published":6235,"modified":6236,"checkedAt":7,"severity":6237,"references":6240,"versionKeys":6248,"packageCount":32,"repositoryCount":32},"ghsa-mcmc-2m55-j8jj-ea2fc7d3","vLLM introduced enhanced protection for CVE-2025-62164",[6232,6233],"CVE-2026-56340","PYSEC-2026-250",[245,6233],"2026-01-08T21:47:43Z","2026-06-27T11:26:32.894007747Z",[6238,6239],{"type":2232,"score":3360},{"type":2232,"score":2339},[6241,6243,6245,6246],{"type":2236,"url":6242},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mcmc-2m55-j8jj",{"type":2247,"url":6244},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F30649",{"type":2244,"url":2416},{"type":2236,"url":6247},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fvllm-denial-of-service-via-unvalidated-multimodal-embeddings",[2435],{"id":246,"slug":6250,"dossier":45,"summary":6251,"aliases":6252,"sourceIds":6255,"published":6256,"modified":6257,"checkedAt":7,"severity":6258,"references":6261,"versionKeys":6269,"packageCount":32,"repositoryCount":582},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[6253,6254],"CVE-2026-44432","PYSEC-2026-142",[246,6254],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[6259,6260],{"type":2232,"score":2339},{"type":2336,"score":2472},[6262,6264,6266,6268],{"type":2236,"url":6263},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":2236,"url":6265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":2247,"url":6267},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":2244,"url":2481},[6270],"pypi:urllib3@2.6.3",{"id":247,"slug":6272,"dossier":45,"summary":6273,"aliases":6274,"sourceIds":6277,"published":6278,"modified":6279,"checkedAt":7,"severity":6280,"references":6283,"versionKeys":6296,"packageCount":32,"repositoryCount":5066},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[6275,6276],"CVE-2026-28684","PYSEC-2026-2270",[247,6276],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[6281],{"type":2232,"score":6282},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[6284,6286,6288,6290,6292,6294],{"type":2241,"url":6285},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":2236,"url":6287},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":2241,"url":6289},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":2247,"url":6291},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":2244,"url":6293},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":2236,"url":6295},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[6297,6298,6299,6300],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":248,"slug":6302,"dossier":45,"summary":6303,"aliases":6304,"sourceIds":6307,"published":6308,"modified":6309,"checkedAt":7,"severity":6310,"references":6313,"versionKeys":6328,"packageCount":32,"repositoryCount":5066},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[6305,6306],"CVE-2026-69243","PYSEC-2026-3546",[248,6306],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[6311],{"type":2336,"score":6312},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[6314,6316,6318,6320,6321,6323,6324,6326],{"type":2247,"url":6315},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2247,"url":6317},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":2247,"url":6319},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":2244,"url":2344},{"type":2247,"url":6322},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":2244,"url":3170},{"type":2236,"url":6325},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":2236,"url":6327},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[2348,2349,2350,2351,2352,2353,2354,2355,5065],{"id":249,"slug":6330,"dossier":45,"summary":6331,"aliases":6332,"sourceIds":6335,"published":6336,"modified":6337,"checkedAt":7,"severity":6338,"references":6340,"versionKeys":6351,"packageCount":32,"repositoryCount":551},"ghsa-mj87-hwqh-73pj-92a4d569","python-multipart affected by Denial of Service via large multipart preamble or epilogue data",[6333,6334],"CVE-2026-40347","PYSEC-2026-3038",[249,6334],"2026-04-15T19:45:44Z","2026-07-13T16:43:05.220439399Z",[6339],{"type":2232,"score":2303},[6341,6343,6345,6346,6348,6349],{"type":2247,"url":6342},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",{"type":2236,"url":6344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40347",{"type":2244,"url":3228},{"type":2247,"url":6347},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.26",{"type":2244,"url":3230},{"type":2236,"url":6350},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mj87-hwqh-73pj",[3403,3404,3234],{"id":250,"slug":6353,"dossier":45,"summary":6354,"aliases":6355,"sourceIds":6358,"published":6359,"modified":6360,"checkedAt":7,"severity":6361,"references":6363,"versionKeys":6376,"packageCount":32,"repositoryCount":5066},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[6356,6357],"CVE-2026-59881","PYSEC-2026-3547",[250,6357],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[6362],{"type":2336,"score":3593},[6364,6366,6368,6370,6372,6373,6374],{"type":2247,"url":6365},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":2236,"url":6367},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":2247,"url":6369},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":2247,"url":6371},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":6375},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[2348,2349,2350,2351,2352,2353,2354,2355,5065],{"id":251,"slug":6378,"dossier":45,"summary":6379,"aliases":6380,"sourceIds":6383,"published":6384,"modified":6385,"checkedAt":7,"severity":6386,"references":6388,"versionKeys":6399,"packageCount":32,"repositoryCount":532},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[6381,6382],"CVE-2025-69225","PYSEC-2026-1109",[251,6382],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[6387],{"type":2336,"score":2447},[6389,6391,6393,6395,6396,6397],{"type":2247,"url":6390},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":2236,"url":6392},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":2241,"url":6394},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":2244,"url":2344},{"type":2244,"url":3170},{"type":2236,"url":6398},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[2348,2349,2350,2351,2352,2353,2354],{"id":252,"slug":6401,"dossier":45,"summary":6402,"aliases":6403,"sourceIds":6406,"published":6407,"modified":6408,"checkedAt":7,"severity":6409,"references":6411,"versionKeys":6426,"packageCount":32,"repositoryCount":32},"ghsa-mrw7-hf4f-83pf-125f2ed3","vLLM deserialization vulnerability leading to DoS and potential RCE",[6404,6405],"CVE-2025-62164","PYSEC-2026-2018",[252,6405],"2025-11-20T20:59:34Z","2026-07-17T16:30:30.638326686Z",[6410],{"type":2232,"score":3360},[6412,6414,6416,6418,6420,6422,6424,6425],{"type":2247,"url":6413},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2236,"url":6415},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62164",{"type":2247,"url":6417},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F27204",{"type":2247,"url":6419},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58fab50d82838d5014f4a14d991fdb9352c9c84b",{"type":2236,"url":6421},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mrw7-hf4f-83pf",{"type":2247,"url":6423},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2018.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2435],{"id":253,"slug":6428,"dossier":45,"summary":6429,"aliases":6430,"sourceIds":6434,"published":6435,"modified":6436,"checkedAt":7,"severity":6437,"references":6441,"versionKeys":6455,"packageCount":32,"repositoryCount":582},"ghsa-mw35-8rx3-xf9r-5497861f","Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization",[6431,6432,6433],"CVE-2026-41486","PYSEC-2026-2272","PYSEC-2026-2296",[253,6432],"2026-04-24T16:15:00Z","2026-07-13T07:26:16.094513511Z",[6438,6440],{"type":2336,"score":6439},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":2232,"score":2399},[6442,6444,6446,6448,6450,6452,6453],{"type":2236,"url":6443},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-mw35-8rx3-xf9r",{"type":2236,"url":6445},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41486",{"type":2247,"url":6447},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F54831",{"type":2241,"url":6449},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F62056",{"type":2241,"url":6451},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002Fc02bd31ae31996805868baa446a131a8d304525f",{"type":2244,"url":3985},{"type":2236,"url":6454},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.55.0",[3999,4000,5587],{"id":254,"slug":6457,"dossier":45,"summary":6458,"aliases":6459,"sourceIds":6462,"published":6463,"modified":6464,"checkedAt":7,"severity":6465,"references":6468,"versionKeys":6477,"packageCount":32,"repositoryCount":502},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[6460,6461],"CVE-2026-34519","PYSEC-2026-2101",[254,6461],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[6466,6467],{"type":2336,"score":2447},{"type":2232,"score":2449},[6469,6471,6473,6475,6476],{"type":2241,"url":6470},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":2236,"url":6472},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":2241,"url":6474},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":255,"slug":6479,"dossier":45,"summary":6480,"aliases":6481,"sourceIds":6484,"published":6485,"modified":6486,"checkedAt":7,"severity":6487,"references":6490,"versionKeys":6498,"packageCount":32,"repositoryCount":582},"ghsa-p423-j2cm-9vmq-1455bc4c","Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs",[6482,6483],"CVE-2026-39892","PYSEC-2026-36",[255,6483],"2026-04-08T19:23:08Z","2026-06-05T18:00:15.295914184Z",[6488,6489],{"type":2336,"score":3593},{"type":2232,"score":2922},[6491,6493,6495,6496],{"type":2236,"url":6492},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-p423-j2cm-9vmq",{"type":2236,"url":6494},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-39892",{"type":2244,"url":3092},{"type":2247,"url":6497},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcryptography\u002FPYSEC-2026-36.yaml",[3100,3101],{"id":256,"slug":6500,"dossier":45,"summary":6501,"aliases":6502,"sourceIds":6505,"published":6506,"modified":6507,"checkedAt":7,"severity":6508,"references":6511,"versionKeys":6520,"packageCount":32,"repositoryCount":502},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[6503,6504],"CVE-2026-34515","PYSEC-2026-2097",[256,6504],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[6509,6510],{"type":2336,"score":5704},{"type":2232,"score":3327},[6512,6514,6516,6518,6519],{"type":2241,"url":6513},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":2236,"url":6515},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":2241,"url":6517},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":257,"slug":6522,"dossier":45,"summary":6523,"aliases":6524,"sourceIds":6528,"published":6529,"modified":6530,"checkedAt":7,"severity":6531,"references":6534,"versionKeys":6547,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[6525,6526,6527],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[257,6527],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[6532,6533],{"type":2232,"score":2303},{"type":2232,"score":2339},[6535,6537,6539,6541,6543,6545,6546],{"type":2280,"url":6536},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":2236,"url":6538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":2241,"url":6540},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":2241,"url":6542},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":2247,"url":6544},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":2244,"url":2778},{"type":2236,"url":3475},[2787,2788,2789],{"id":258,"slug":6549,"dossier":45,"summary":6550,"aliases":6551,"sourceIds":6554,"published":6004,"modified":6555,"checkedAt":7,"severity":6556,"references":6559,"versionKeys":6572,"packageCount":32,"repositoryCount":601},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[6552,6553],"CVE-2025-3777","PYSEC-2026-1986",[258,6553],"2026-07-07T17:56:47.225461188Z",[6557],{"type":2232,"score":6558},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[6560,6562,6564,6565,6567,6569,6570],{"type":2236,"url":6561},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":2247,"url":6563},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":2244,"url":2278},{"type":2247,"url":6566},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":2247,"url":6568},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":2244,"url":2557},{"type":2236,"url":6571},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[2285,2286],{"id":259,"slug":6574,"dossier":89,"summary":6575,"aliases":6576,"sourceIds":6580,"published":6581,"modified":6582,"checkedAt":7,"severity":6583,"references":6585,"versionKeys":6596,"packageCount":32,"repositoryCount":102},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[6577,6578,6579],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[259,6579],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[6584],{"type":2232,"score":2339},[6586,6588,6590,6592,6594,6595],{"type":2280,"url":6587},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":2236,"url":6589},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":2241,"url":6591},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":2247,"url":6593},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":2244,"url":2778},{"type":2236,"url":2780},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":260,"slug":6598,"dossier":45,"summary":6599,"aliases":6600,"sourceIds":6603,"published":6604,"modified":6605,"checkedAt":7,"severity":6606,"references":6610,"versionKeys":6625,"packageCount":32,"repositoryCount":582},"ghsa-pmqf-x6x8-p7qw-b2778e4b","vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs",[6601,6602],"CVE-2025-62372","PYSEC-2026-2019",[260,6602],"2025-11-20T21:23:29Z","2026-07-17T16:30:32.010515304Z",[6607,6608],{"type":2232,"score":2682},{"type":2336,"score":6609},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[6611,6613,6615,6616,6618,6619,6621,6623,6624],{"type":2247,"url":6612},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2236,"url":6614},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62372",{"type":2247,"url":6417},{"type":2247,"url":6617},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F6613",{"type":2247,"url":6419},{"type":2236,"url":6620},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pmqf-x6x8-p7qw",{"type":2247,"url":6622},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2019.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2434,2435,2642],{"id":261,"slug":6627,"dossier":45,"summary":6628,"aliases":6629,"sourceIds":6632,"published":6633,"modified":6634,"checkedAt":7,"severity":6635,"references":6637,"versionKeys":6646,"packageCount":32,"repositoryCount":551},"ghsa-pp6c-gr5w-3c5g-de40aafe","python-multipart has Denial of Service via unbounded multipart part headers",[6630,6631],"CVE-2026-42561","PYSEC-2026-3039",[261,6631],"2026-05-06T21:56:14Z","2026-07-13T16:42:24.725022295Z",[6636],{"type":2232,"score":2339},[6638,6640,6642,6643,6644],{"type":2247,"url":6639},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",{"type":2236,"url":6641},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42561",{"type":2244,"url":3228},{"type":2244,"url":3230},{"type":2236,"url":6645},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pp6c-gr5w-3c5g",[3403,3404,3234],{"id":262,"slug":6648,"dossier":45,"summary":6649,"aliases":6650,"sourceIds":6653,"published":6654,"modified":6655,"checkedAt":7,"severity":6656,"references":6658,"versionKeys":6678,"packageCount":32,"repositoryCount":582},"ghsa-pq5c-rjhq-qp7p-741b6a4f","vLLM: Denial of Service via Unbounded Frame Count in video\u002Fjpeg Base64 Processing",[6651,6652],"CVE-2026-34755","PYSEC-2026-144",[262,6652],"2026-04-03T21:51:35Z","2026-07-17T16:30:29.016474105Z",[6657],{"type":2232,"score":2682},[6659,6661,6663,6665,6667,6668,6669,6671,6673,6675,6676],{"type":2241,"url":6660},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-pq5c-rjhq-qp7p",{"type":2236,"url":6662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34755",{"type":2247,"url":6664},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F38636",{"type":2247,"url":6666},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F58ee61422169ce17e08248f8efa1e9df434fe395",{"type":2247,"url":2693},{"type":2247,"url":2695},{"type":2247,"url":6670},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34755",{"type":2247,"url":6672},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2455403",{"type":2247,"url":6674},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-144.yaml",{"type":2244,"url":2416},{"type":2247,"url":6677},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34755.json",[2434,2435,2642],{"id":263,"slug":6680,"dossier":45,"summary":6681,"aliases":6682,"sourceIds":6685,"published":6686,"modified":6687,"checkedAt":7,"severity":6688,"references":6690,"versionKeys":6702,"packageCount":32,"repositoryCount":532},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[6683,6684],"CVE-2025-50181","PYSEC-2026-1999",[263,6684],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[6689],{"type":2232,"score":2801},[6691,6693,6695,6697,6698,6699,6700],{"type":2247,"url":6692},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":2236,"url":6694},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":2241,"url":6696},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":2244,"url":2481},{"type":2247,"url":2811},{"type":2244,"url":2483},{"type":2236,"url":6701},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[2487,2488,2489,2490],{"id":264,"slug":6704,"dossier":89,"summary":6705,"aliases":6706,"sourceIds":6710,"published":6711,"modified":6712,"checkedAt":7,"severity":6713,"references":6716,"versionKeys":6728,"packageCount":32,"repositoryCount":102},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[6707,6708,6709],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[264,6709],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[6714,6715],{"type":2336,"score":4965},{"type":2232,"score":3675},[6717,6718,6720,6722,6724,6726,6727],{"type":2247,"url":4969},{"type":2241,"url":6719},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":2236,"url":6721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":2241,"url":6723},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":2241,"url":6725},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":2244,"url":2778},{"type":2236,"url":3449},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":265,"slug":6730,"dossier":45,"summary":6731,"aliases":6732,"sourceIds":6735,"published":6736,"modified":6737,"checkedAt":7,"severity":6738,"references":6741,"versionKeys":6762,"packageCount":32,"repositoryCount":582},"ghsa-q279-jhrf-cc6v-6a45143b","Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack",[6733,6734],"CVE-2025-62593","PYSEC-2026-520",[265,6734],"2025-11-26T19:35:23Z","2026-07-01T20:23:03.643178Z",[6739],{"type":2336,"score":6740},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[6742,6744,6746,6748,6750,6752,6754,6755,6757,6759,6760],{"type":2247,"url":6743},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",{"type":2236,"url":6745},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-62593",{"type":2247,"url":6747},"https:\u002F\u002Fgithub.com\u002Fnccgroup\u002Fsingularity\u002Fpull\u002F68",{"type":2247,"url":6749},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F70e7c72780bdec075dba6cad1afe0832772bfe09",{"type":2247,"url":6751},"https:\u002F\u002Fdocs.ray.io\u002Fen\u002Freleases-2.51.1\u002Fray-security\u002Findex.html",{"type":2247,"url":6753},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FMalvertising",{"type":2244,"url":3985},{"type":2247,"url":6756},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Fe7889ae542bf0188610bc8b06d274cbf53790cbd\u002Fpython\u002Fray\u002Fdashboard\u002Fhttp_server_head.py#L184-L196",{"type":2247,"url":6758},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fblob\u002Ff39a860436dca3ed5b9dfae84bd867ac10c84dc6\u002Fpython\u002Fray\u002Fdashboard\u002Foptional_utils.py#L129-L155",{"type":2244,"url":3997},{"type":2236,"url":6761},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q279-jhrf-cc6v",[3999,4000,5587],{"id":266,"slug":6764,"dossier":45,"summary":6765,"aliases":6766,"sourceIds":6769,"published":6004,"modified":6770,"checkedAt":7,"severity":6771,"references":6773,"versionKeys":6784,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[6767,6768],"CVE-2025-3263","PYSEC-2026-1987",[266,6768],"2026-07-07T17:56:57.889099913Z",[6772],{"type":2232,"score":2964},[6774,6776,6777,6778,6779,6781,6782],{"type":2236,"url":6775},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":2247,"url":6012},{"type":2247,"url":6014},{"type":2244,"url":2278},{"type":2247,"url":6780},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":2244,"url":2557},{"type":2236,"url":6783},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[2285],{"id":267,"slug":6786,"dossier":45,"summary":6787,"aliases":6788,"sourceIds":6791,"published":6792,"modified":6793,"checkedAt":7,"severity":6794,"references":6798,"versionKeys":6811,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[6789,6790],"CVE-2024-56326","PYSEC-2026-1475",[267,6790],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[6795,6797],{"type":2232,"score":6796},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2336,"score":5016},[6799,6801,6803,6805,6806,6807,6808,6809],{"type":2247,"url":6800},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":2236,"url":6802},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":2241,"url":6804},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":2244,"url":5025},{"type":2247,"url":5524},{"type":2247,"url":5027},{"type":2244,"url":5031},{"type":2236,"url":6810},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[5035],{"id":268,"slug":6813,"dossier":45,"summary":6814,"aliases":6815,"sourceIds":6818,"published":6819,"modified":6820,"checkedAt":7,"severity":6821,"references":6826,"versionKeys":6838,"packageCount":32,"repositoryCount":582},"ghsa-q5fh-2hc8-f6rq-8b758e91","Ray dashboard DELETE endpoints allow unauthenticated browser-triggered DoS (Serve shutdown \u002F job deletion)",[6816,6817],"CVE-2026-27482","PYSEC-2026-2271",[268,6817],"2026-02-20T21:15:25Z","2026-07-13T07:26:45.034743516Z",[6822,6824],{"type":2232,"score":6823},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:H",{"type":2232,"score":6825},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6827,6829,6831,6833,6835,6836],{"type":2280,"url":6828},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fsecurity\u002Fadvisories\u002FGHSA-q5fh-2hc8-f6rq",{"type":2236,"url":6830},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27482",{"type":2241,"url":6832},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fpull\u002F60526",{"type":2241,"url":6834},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Fcommit\u002F0fda8b824cdc9dc6edd763bb28dfd7d1cc9b02a4",{"type":2244,"url":3985},{"type":2236,"url":6837},"https:\u002F\u002Fgithub.com\u002Fray-project\u002Fray\u002Freleases\u002Ftag\u002Fray-2.54.0",[3999,4000,5587],{"id":269,"slug":6840,"dossier":45,"summary":6841,"aliases":6842,"sourceIds":6845,"published":6846,"modified":6847,"checkedAt":7,"severity":6848,"references":6851,"versionKeys":6871,"packageCount":32,"repositoryCount":582},"ghsa-q8gq-377p-jq3r-b6095d17","vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution",[6843,6844],"CVE-2026-41523","PYSEC-2026-2300",[269,6844],"2026-06-16T17:34:49Z","2026-07-17T16:30:30.544440776Z",[6849],{"type":2232,"score":6850},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[6852,6854,6856,6858,6859,6860,6862,6864,6866,6867,6869],{"type":2280,"url":6853},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-q8gq-377p-jq3r",{"type":2236,"url":6855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41523",{"type":2241,"url":6857},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fb3c7ffcab82c2439726f8cb213800f6f38c023d3",{"type":2236,"url":2693},{"type":2236,"url":2695},{"type":2247,"url":6861},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-41523",{"type":2513,"url":6863},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491582",{"type":2247,"url":6865},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2300.yaml",{"type":2244,"url":2416},{"type":2236,"url":6868},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fdcb05b04-e625-41e7-adbc-bbae0cc2d64c",{"type":2247,"url":6870},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-41523.json",[2434,2435,2642],{"id":270,"slug":6873,"dossier":89,"summary":6874,"aliases":6875,"sourceIds":6878,"published":6879,"modified":6880,"checkedAt":7,"severity":6881,"references":6884,"versionKeys":6890,"packageCount":32,"repositoryCount":5477},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[6876,6877],"CVE-2026-44431","PYSEC-2026-141",[270,6877],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[6882,6883],{"type":2232,"score":4613},{"type":2336,"score":5375},[6885,6887,6889],{"type":2236,"url":6886},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":2236,"url":6888},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":2244,"url":2481},[2487,2488,2489,2490,2491,6270],{"id":271,"slug":6892,"dossier":45,"summary":6893,"aliases":6894,"sourceIds":6898,"published":6899,"modified":6900,"checkedAt":7,"severity":6901,"references":6905,"versionKeys":6923,"packageCount":32,"repositoryCount":502},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[6895,6896,6897],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[271],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[6902,6903],{"type":2232,"score":5110},{"type":2336,"score":6904},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[6906,6908,6910,6912,6914,6916,6917,6919,6921],{"type":2236,"url":6907},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":2247,"url":6909},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":2247,"url":6911},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":2247,"url":6913},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":2247,"url":6915},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":2244,"url":2520},{"type":2247,"url":6918},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":2247,"url":6920},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":2247,"url":6922},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[2532,2533,2534,4372,4373,6924,6925,6926],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":272,"slug":6928,"dossier":45,"summary":6929,"aliases":6930,"sourceIds":6933,"published":6934,"modified":6935,"checkedAt":7,"severity":6936,"references":6939,"versionKeys":6965,"packageCount":32,"repositoryCount":582},"ghsa-qh4c-xf7m-gxfc-81424acf","vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector",[6931,6932],"CVE-2026-24779","PYSEC-2026-2020",[272,6932],"2026-01-28T16:14:28Z","2026-07-21T12:46:28.194413173Z",[6937],{"type":2232,"score":6938},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[6940,6942,6944,6946,6948,6950,6951,6952,6954,6956,6958,6960,6961,6962,6963,6964],{"type":2247,"url":6941},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2236,"url":6943},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24779",{"type":2247,"url":6945},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F32746",{"type":2247,"url":6947},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Ff46d576c54fb8aeec5fc70560e850bed38ef17d7",{"type":2247,"url":6949},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24779.json",{"type":2244,"url":2412},{"type":2244,"url":2416},{"type":2247,"url":6953},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2020.yaml",{"type":2236,"url":6955},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qh4c-xf7m-gxfc",{"type":2247,"url":6957},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433624",{"type":2247,"url":6959},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24779",{"type":2247,"url":2428},{"type":2247,"url":2430},{"type":2247,"url":2949},{"type":2247,"url":2951},{"type":2247,"url":4576},[2434,2435,2642],{"id":273,"slug":6967,"dossier":45,"summary":6968,"aliases":6969,"sourceIds":6972,"published":6973,"modified":6974,"checkedAt":7,"severity":6975,"references":6978,"versionKeys":6993,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[6970,6971],"CVE-2026-22701","PYSEC-2026-1374",[273,6971],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[6976],{"type":2232,"score":6977},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[6979,6981,6983,6985,6987,6989,6991],{"type":2247,"url":6980},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":2236,"url":6982},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":2247,"url":6984},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":2247,"url":6986},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":2244,"url":6988},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":2244,"url":6990},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":2236,"url":6992},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[6994,6995,6996,6997],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":274,"slug":6999,"dossier":45,"summary":7000,"aliases":7001,"sourceIds":7004,"published":7005,"modified":7006,"checkedAt":7,"severity":7007,"references":7010,"versionKeys":7024,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[7002,7003],"CVE-2025-2099","PYSEC-2025-40",[274,7003],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[7008,7009],{"type":2232,"score":2964},{"type":2232,"score":2339},[7011,7013,7015,7017,7018,7020,7022],{"type":2236,"url":7012},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":2247,"url":7014},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":2241,"url":7016},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":2244,"url":2278},{"type":2247,"url":7019},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":2247,"url":7021},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":2236,"url":7023},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[2285],{"id":275,"slug":7026,"dossier":45,"summary":7027,"aliases":7028,"sourceIds":7031,"published":7032,"modified":7033,"checkedAt":7,"severity":7034,"references":7038,"versionKeys":7061,"packageCount":32,"repositoryCount":34},"ghsa-qrc4-49gv-mv9m-c7358be2","LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit",[7029,7030],"CVE-2026-47101","PYSEC-2026-2598",[275,7030],"2026-05-21T21:30:36Z","2026-07-13T16:42:56.741599701Z",[7035,7036],{"type":2232,"score":3360},{"type":2336,"score":7037},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[7039,7041,7043,7045,7047,7049,7050,7052,7054,7056,7058,7059],{"type":2236,"url":7040},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47101",{"type":2247,"url":7042},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F2220f3076ac89bd2a2e3439acf57dcfbec2434c9",{"type":2247,"url":7044},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F5190bd07eb23a037745d86328096f54378f1614a",{"type":2247,"url":7046},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fd910a95661fce3cdd36f3b06c03ecf9c46c6457c",{"type":2247,"url":7048},"https:\u002F\u002Fgist.github.com\u002F13ph03nix\u002F9ec616e1fdc77b3673509c60206e827f",{"type":2244,"url":2856},{"type":2247,"url":7051},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Freleases\u002Ftag\u002Fv1.83.14-stable",{"type":2247,"url":7053},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F8e75edfb-ff05-4e63-bfca-2d93d03fb3b9",{"type":2247,"url":7055},"https:\u002F\u002Fwww.obsidiansecurity.com\u002Fblog\u002Flitellm-privilege-escalation-rce",{"type":2247,"url":7057},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-api-key-generation",{"type":2244,"url":2860},{"type":2236,"url":7060},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qrc4-49gv-mv9m",[2864,2865,2866,2867],{"id":276,"slug":7063,"dossier":45,"summary":5845,"aliases":7064,"sourceIds":7067,"published":7068,"modified":7069,"checkedAt":7,"severity":7070,"references":7074,"versionKeys":7088,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[7065,7066],"CVE-2024-11392","PYSEC-2024-227",[276,7066],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[7071,7073],{"type":2232,"score":7072},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":2232,"score":2399},[7075,7077,7078,7079,7080,7082,7084,7086],{"type":2236,"url":7076},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":2247,"url":5860},{"type":2247,"url":5862},{"type":2244,"url":2278},{"type":2247,"url":7081},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":2247,"url":7083},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":2236,"url":7085},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":2236,"url":7087},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[2285],{"id":277,"slug":7090,"dossier":45,"summary":7091,"aliases":7092,"sourceIds":7095,"published":7096,"modified":7097,"checkedAt":7,"severity":7098,"references":7103,"versionKeys":7141,"packageCount":32,"repositoryCount":532},"ghsa-r6ph-v2qm-q3c2-c75907df","cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",[7093,7094],"CVE-2026-26007","PYSEC-2026-2141",[277,7094],"2026-02-10T21:27:06Z","2026-07-13T07:26:47.289183808Z",[7099,7101],{"type":2336,"score":7100},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"type":2232,"score":7102},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7104,7106,7108,7110,7111,7113,7115,7117,7118,7120,7122,7124,7126,7128,7130,7132,7134,7136,7138,7140],{"type":2247,"url":7105},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fsecurity\u002Fadvisories\u002FGHSA-r6ph-v2qm-q3c2",{"type":2236,"url":7107},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26007",{"type":2247,"url":7109},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Fcommit\u002F0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",{"type":2244,"url":3092},{"type":2247,"url":7112},"https:\u002F\u002Fgithub.com\u002Fpyca\u002Fcryptography\u002Freleases\u002Ftag\u002F46.0.5",{"type":2247,"url":7114},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-26007",{"type":2247,"url":7116},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-26007.json",{"type":2236,"url":4986},{"type":2236,"url":7119},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:12176",{"type":2236,"url":7121},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13512",{"type":2236,"url":7123},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13545",{"type":2236,"url":7125},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13553",{"type":2236,"url":7127},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:13672",{"type":2236,"url":7129},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19355",{"type":2236,"url":7131},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21431",{"type":2236,"url":7133},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21517",{"type":2236,"url":7135},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22330",{"type":2236,"url":7137},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22993",{"type":2236,"url":7139},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:2694",{"type":2236,"url":5003},[3096,3097,3098,3099,3100,3101],{"id":278,"slug":7143,"dossier":45,"summary":7144,"aliases":7145,"sourceIds":7149,"published":7150,"modified":7151,"checkedAt":7,"severity":7152,"references":7155,"versionKeys":7169,"packageCount":32,"repositoryCount":102},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[7146,7147,7148],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[278,7148],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[7153,7154],{"type":2232,"score":2508},{"type":2336,"score":3441},[7156,7158,7160,7162,7164,7165,7166,7167],{"type":2247,"url":7157},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":2236,"url":7159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":2247,"url":7161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":2247,"url":7163},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":2244,"url":2778},{"type":2247,"url":3449},{"type":2244,"url":3477},{"type":2236,"url":7168},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":279,"slug":7171,"dossier":45,"summary":7172,"aliases":7173,"sourceIds":7176,"published":7177,"modified":7178,"checkedAt":7,"severity":7179,"references":7181,"versionKeys":7196,"packageCount":32,"repositoryCount":601},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[7174,7175],"CVE-2025-6051","PYSEC-2026-1988",[279,7175],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[7180],{"type":2232,"score":2964},[7182,7184,7186,7188,7190,7191,7193,7194],{"type":2236,"url":7183},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":2247,"url":7185},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":2247,"url":7187},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":2247,"url":7189},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":2244,"url":2278},{"type":2247,"url":7192},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":2244,"url":2557},{"type":2236,"url":7195},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[2285,2286],{"id":280,"slug":7198,"dossier":45,"summary":7199,"aliases":7200,"sourceIds":7203,"published":7204,"modified":7205,"checkedAt":7,"severity":7206,"references":7209,"versionKeys":7222,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[7201,7202],"CVE-2026-25087","PYSEC-2026-113",[280,7202],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[7207],{"type":2232,"score":7208},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[7210,7212,7214,7216,7218,7220],{"type":2236,"url":7211},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":2241,"url":7213},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":2244,"url":7215},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":2247,"url":7217},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":2236,"url":7219},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":2236,"url":7221},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[7223,7224,7225,7226],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":281,"slug":7228,"dossier":45,"summary":7229,"aliases":7230,"sourceIds":7234,"published":5106,"modified":7235,"checkedAt":7,"severity":7236,"references":7239,"versionKeys":7257,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[7231,7232,7233],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[281],"2026-07-17T17:15:51.452848951Z",[7237,7238],{"type":2232,"score":5110},{"type":2336,"score":6904},[7240,7242,7244,7246,7248,7250,7251,7253,7255],{"type":2236,"url":7241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":2247,"url":7243},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":2247,"url":7245},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":2247,"url":7247},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":2247,"url":7249},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":2244,"url":2520},{"type":2247,"url":7252},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":2247,"url":7254},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":2247,"url":7256},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[7258,2532,2533,2534,4372,4373,6924,6925,6926],"pypi:torch@2.10.0",{"id":282,"slug":7260,"dossier":45,"summary":7261,"aliases":7262,"sourceIds":7265,"published":7266,"modified":7267,"checkedAt":7,"severity":7268,"references":7271,"versionKeys":7283,"packageCount":32,"repositoryCount":582},"ghsa-rwxx-mrjm-wc2m-e234c364","vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends",[7263,7264],"CVE-2026-55574","PYSEC-2026-2304",[282,7264],"2026-07-06T21:16:57.347Z","2026-07-17T17:15:51.409816079Z",[7269,7270],{"type":2232,"score":2339},{"type":2336,"score":3219},[7272,7274,7276,7278,7280,7282],{"type":2236,"url":7273},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rwxx-mrjm-wc2m",{"type":2236,"url":7275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55574",{"type":2241,"url":7277},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F45118",{"type":2241,"url":7279},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002F2b3006076c5e9bc4cda9e03e3641388de3c5c286",{"type":2247,"url":7281},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2304.yaml",{"type":2244,"url":2416},[2434,2435,2642],{"id":283,"slug":7285,"dossier":45,"summary":7286,"aliases":7287,"sourceIds":7290,"published":7291,"modified":7292,"checkedAt":7,"severity":7293,"references":7295,"versionKeys":7310,"packageCount":32,"repositoryCount":32},"ghsa-rxc4-3w6r-4v47-0c8c9269","vllm API endpoints vulnerable to Denial of Service Attacks",[7288,7289],"CVE-2025-48956","PYSEC-2026-2021",[283,7289],"2025-08-21T14:24:16Z","2026-07-17T16:30:30.538696375Z",[7294],{"type":2232,"score":2339},[7296,7298,7300,7302,7304,7306,7308,7309],{"type":2247,"url":7297},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2236,"url":7299},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48956",{"type":2247,"url":7301},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F23267",{"type":2247,"url":7303},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fd8b736f913a59117803d6701521d2e4861701944",{"type":2236,"url":7305},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rxc4-3w6r-4v47",{"type":2247,"url":7307},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2021.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2642],{"id":284,"slug":7312,"dossier":45,"summary":7313,"aliases":7314,"sourceIds":7317,"published":7318,"modified":7319,"checkedAt":7,"severity":7320,"references":7324,"versionKeys":7336,"packageCount":32,"repositoryCount":551},"ghsa-v92g-xgxw-vvmm-8ea08169","Mako: Path traversal via double-slash URI prefix in TemplateLookup",[7315,7316],"CVE-2026-41205","PYSEC-2026-88",[284,7316],"2026-04-16T21:16:40Z","2026-06-05T14:16:15.268937299Z",[7321,7322],{"type":2232,"score":3327},{"type":2336,"score":7323},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7325,7327,7329,7331,7333,7334],{"type":2236,"url":7326},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fsecurity\u002Fadvisories\u002FGHSA-v92g-xgxw-vvmm",{"type":2236,"url":7328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41205",{"type":2247,"url":7330},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Fcommit\u002Fe05ac61989a7fb9dd7dcde6cfd72dc48328719a3",{"type":2247,"url":7332},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmako\u002FPYSEC-2026-88.yaml",{"type":2244,"url":2378},{"type":2247,"url":7335},"https:\u002F\u002Fgithub.com\u002Fsqlalchemy\u002Fmako\u002Freleases\u002Ftag\u002Frel_1_3_11",[2386,2387],{"id":285,"slug":7338,"dossier":45,"summary":7339,"aliases":7340,"sourceIds":7343,"published":7344,"modified":7345,"checkedAt":7,"severity":7346,"references":7349,"versionKeys":7358,"packageCount":32,"repositoryCount":551},"ghsa-v9pg-7xvm-68hf-bd9c7524","python-multipart: Negative Content-Length in parse_form buffers the entire body in memory",[7341,7342],"CVE-2026-53540","PYSEC-2026-3040",[285,7342],"2026-06-15T20:23:45Z","2026-07-13T16:43:20.711288699Z",[7347],{"type":2232,"score":7348},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[7350,7352,7353,7354,7356],{"type":2247,"url":7351},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2244,"url":3228},{"type":2244,"url":3230},{"type":2236,"url":7355},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v9pg-7xvm-68hf",{"type":2236,"url":7357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53540",[3403,3404,3234],{"id":286,"slug":7360,"dossier":45,"summary":7361,"aliases":7362,"sourceIds":7365,"published":7366,"modified":7367,"checkedAt":7,"severity":7368,"references":7370,"versionKeys":7381,"packageCount":32,"repositoryCount":551},"ghsa-vffw-93wf-4j4q-3828c302","python-multipart: Content-Disposition parameter smuggling via RFC 2231\u002F5987 extended parameters",[7363,7364],"CVE-2026-53537","PYSEC-2026-3041",[286,7364],"2026-06-15T20:20:51Z","2026-07-15T22:30:45.845963114Z",[7369],{"type":2232,"score":3792},[7371,7373,7375,7376,7378,7380],{"type":2247,"url":7372},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2236,"url":7374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-53537",{"type":2244,"url":3228},{"type":2236,"url":7377},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vffw-93wf-4j4q",{"type":2247,"url":7379},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Fblob\u002Fmain\u002Fvulns\u002Fpython-multipart\u002FPYSEC-2026-3041.yaml",{"type":2244,"url":3230},[3403,3404,3234],{"id":287,"slug":7383,"dossier":45,"summary":7384,"aliases":7385,"sourceIds":7389,"published":5106,"modified":7390,"checkedAt":7,"severity":7391,"references":7394,"versionKeys":7409,"packageCount":32,"repositoryCount":513},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[7386,7387,7388],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[287],"2026-06-10T17:41:15.774477397Z",[7392,7393],{"type":2232,"score":5110},{"type":2336,"score":5112},[7395,7397,7398,7399,7400,7402,7403,7405,7407],{"type":2236,"url":7396},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":2247,"url":5117},{"type":2247,"url":5119},{"type":2247,"url":5121},{"type":2247,"url":7401},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":2244,"url":2520},{"type":2247,"url":7404},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":2247,"url":7406},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":2247,"url":7408},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[2532,2533,2534,4372,4373,6924],{"id":288,"slug":7411,"dossier":45,"summary":7412,"aliases":7413,"sourceIds":7417,"published":7418,"modified":7419,"checkedAt":7,"severity":7420,"references":7422,"versionKeys":7436,"packageCount":32,"repositoryCount":102},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[7414,7415,7416],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[288,7416],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[7421],{"type":2336,"score":3219},[7423,7425,7427,7429,7431,7432,7433,7434],{"type":2247,"url":7424},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":2236,"url":7426},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":2247,"url":7428},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":2247,"url":7430},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":2244,"url":2778},{"type":2247,"url":3475},{"type":2244,"url":3477},{"type":2236,"url":7435},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":289,"slug":7438,"dossier":45,"summary":7439,"aliases":7440,"sourceIds":7443,"published":7444,"modified":7445,"checkedAt":7,"severity":7446,"references":7449,"versionKeys":7462,"packageCount":32,"repositoryCount":582},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[7441,7442],"CVE-2025-43859","PYSEC-2026-348",[289,7442],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[7447],{"type":2232,"score":7448},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[7450,7452,7454,7456,7458,7460],{"type":2247,"url":7451},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":2236,"url":7453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":2247,"url":7455},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":2244,"url":7457},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":2244,"url":7459},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":2236,"url":7461},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[7463],"pypi:h11@0.14.0",{"id":290,"slug":7465,"dossier":45,"summary":7466,"aliases":7467,"sourceIds":7470,"published":7471,"modified":7472,"checkedAt":7,"severity":7473,"references":7475,"versionKeys":7487,"packageCount":32,"repositoryCount":32},"ghsa-vrq3-r879-7m65-0fc59d0f","vLLM Tool Schema allows DoS via Malformed pattern and type Fields",[7468,7469],"CVE-2025-48944","PYSEC-2026-2023",[290,7469],"2025-05-28T19:42:32Z","2026-08-07T08:12:14.152190792Z",[7474],{"type":2232,"score":2682},[7476,7478,7480,7481,7483,7485,7486],{"type":2247,"url":7477},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2236,"url":7479},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48944",{"type":2247,"url":3874},{"type":2236,"url":7482},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vrq3-r879-7m65",{"type":2247,"url":7484},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2023.yaml",{"type":2244,"url":2416},{"type":2244,"url":2412},[2642],{"id":291,"slug":7489,"dossier":45,"summary":7490,"aliases":7491,"sourceIds":7494,"published":7495,"modified":7496,"checkedAt":7,"severity":7497,"references":7500,"versionKeys":7511,"packageCount":32,"repositoryCount":582},"ghsa-vvw2-h478-xwr3-e8568ce6","DSPy does not properly restrict file reads",[7492,7493],"CVE-2025-12695","PYSEC-2026-1318",[291,7493],"2025-11-04T15:31:35Z","2026-07-07T17:57:24.503135806Z",[7498],{"type":2232,"score":7499},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[7501,7503,7505,7507,7509],{"type":2236,"url":7502},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12695",{"type":2244,"url":7504},"https:\u002F\u002Fgithub.com\u002Fstanfordnlp\u002Fdspy",{"type":2247,"url":7506},"https:\u002F\u002Fresearch.jfrog.com\u002Fvulnerabilities\u002Fdspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652",{"type":2244,"url":7508},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdspy",{"type":2236,"url":7510},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vvw2-h478-xwr3",[7512,7513,7514],"pypi:dspy@2.5.43","pypi:dspy@2.6.23","pypi:dspy@2.6.27",{"id":292,"slug":7516,"dossier":45,"summary":7517,"aliases":7518,"sourceIds":7521,"published":7522,"modified":7523,"checkedAt":7,"severity":7524,"references":7528,"versionKeys":7537,"packageCount":32,"repositoryCount":502},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[7519,7520],"CVE-2026-22815","PYSEC-2026-2094",[292,7520],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[7525,7526],{"type":2336,"score":3593},{"type":2336,"score":7527},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7529,7531,7533,7535,7536],{"type":2241,"url":7530},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":2236,"url":7532},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":2241,"url":7534},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":2244,"url":2344},{"type":2236,"url":2459},[2348,2349,2350,2351,2352,2353,2354,2355],{"id":293,"slug":7539,"dossier":45,"summary":7540,"aliases":7541,"sourceIds":7544,"published":7545,"modified":7546,"checkedAt":7,"severity":7547,"references":7549,"versionKeys":7561,"packageCount":32,"repositoryCount":32},"ghsa-w6q7-j642-7c25-391074f5","vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`",[7542,7543],"CVE-2025-48887","PYSEC-2025-50",[293,7543],"2025-05-28T17:49:33Z","2026-08-07T08:12:04.723988051Z",[7548],{"type":2232,"score":2682},[7550,7552,7554,7555,7556,7558,7559],{"type":2280,"url":7551},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",{"type":2236,"url":7553},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48887",{"type":2513,"url":5888},{"type":2241,"url":5890},{"type":2247,"url":7557},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2025-50.yaml",{"type":2244,"url":2416},{"type":2236,"url":7560},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w6q7-j642-7c25",[2642],{"id":294,"slug":7563,"dossier":45,"summary":7564,"aliases":7565,"sourceIds":7568,"published":7569,"modified":7570,"checkedAt":7,"severity":7571,"references":7574,"versionKeys":7591,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[7566,7567],"CVE-2025-68146","PYSEC-2026-1375",[294,7567],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[7572],{"type":2232,"score":7573},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[7575,7577,7579,7580,7582,7584,7586,7587,7589],{"type":2247,"url":7576},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2247,"url":7578},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":2244,"url":6988},{"type":2247,"url":7581},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":2247,"url":7583},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":2247,"url":7585},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":2244,"url":6990},{"type":2236,"url":7588},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":2236,"url":7590},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[6994,6995,6996,6997],{"id":295,"slug":7593,"dossier":45,"summary":7594,"aliases":7595,"sourceIds":7598,"published":7599,"modified":7600,"checkedAt":7,"severity":7601,"references":7604,"versionKeys":7615,"packageCount":32,"repositoryCount":64},"ghsa-w8v5-vhqr-4h9v-05062d37","DiskCache has unsafe pickle deserialization",[7596,7597],"CVE-2025-69872","PYSEC-2026-2447",[295,7597],"2026-02-11T21:30:39Z","2026-07-13T16:43:29.892158838Z",[7602],{"type":2336,"score":7603},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[7605,7607,7609,7611,7613],{"type":2236,"url":7606},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69872",{"type":2247,"url":7608},"https:\u002F\u002Fgithub.com\u002FEthanKim88\u002Fethan-cve-disclosures\u002Fblob\u002Fmain\u002FCVE-2025-69872-DiskCache-Pickle-Deserialization.md",{"type":2244,"url":7610},"https:\u002F\u002Fgithub.com\u002Fgrantjenks\u002Fpython-diskcache",{"type":2244,"url":7612},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fdiskcache",{"type":2236,"url":7614},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w8v5-vhqr-4h9v",[7616],"pypi:diskcache@5.6.3",{"id":296,"slug":7618,"dossier":45,"summary":7619,"aliases":7620,"sourceIds":7623,"published":7624,"modified":7625,"checkedAt":7,"severity":7626,"references":7628,"versionKeys":7644,"packageCount":32,"repositoryCount":34},"ghsa-wgvc-ghv9-3pmm-9038f7ef","UltraJSON has a Memory Leak parsing large integers allows DoS",[7621,7622],"CVE-2026-32874","PYSEC-2026-2291",[296,7622],"2026-03-18T13:01:15Z","2026-07-13T07:26:54.389124194Z",[7627],{"type":2232,"score":2339},[7629,7631,7633,7635,7636,7638,7640,7642],{"type":2236,"url":7630},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fsecurity\u002Fadvisories\u002FGHSA-wgvc-ghv9-3pmm",{"type":2236,"url":7632},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-32874",{"type":2241,"url":7634},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Fcommit\u002F4baeb950df780092bd3c89fc702a868e99a3a1d2",{"type":2244,"url":2665},{"type":2236,"url":7637},"https:\u002F\u002Fgithub.com\u002Fultrajson\u002Fultrajson\u002Freleases\u002Ftag\u002F5.12.0",{"type":2247,"url":7639},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-32874",{"type":2247,"url":7641},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-32874.json",{"type":2513,"url":7643},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449411",[2669],{"id":297,"slug":7646,"dossier":45,"summary":7647,"aliases":7648,"sourceIds":7652,"published":7653,"modified":7654,"checkedAt":7,"severity":7655,"references":7658,"versionKeys":7696,"packageCount":32,"repositoryCount":102},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[7649,7650,7651],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[297,7651],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[7656,7657],{"type":2232,"score":2339},{"type":2336,"score":3219},[7659,7661,7663,7665,7667,7668,7670,7672,7674,7676,7678,7680,7681,7683,7685,7687,7688,7690,7692,7694],{"type":2247,"url":7660},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":2236,"url":7662},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":2247,"url":7664},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":2247,"url":7666},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":2244,"url":2778},{"type":2247,"url":7669},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":2247,"url":7671},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":2247,"url":7673},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":2236,"url":7675},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":2236,"url":7677},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":2236,"url":7679},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":2236,"url":4992},{"type":2236,"url":7682},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":2236,"url":7684},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":2236,"url":7686},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":2236,"url":4102},{"type":2236,"url":7689},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":2236,"url":7691},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":2236,"url":7693},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":2236,"url":7695},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2782,2783,2784,2785,2786,2787,2788,2789],{"id":298,"slug":7698,"dossier":45,"summary":7699,"aliases":7700,"sourceIds":7704,"published":7705,"modified":7706,"checkedAt":7,"severity":7707,"references":7710,"versionKeys":7719,"packageCount":32,"repositoryCount":102},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[7701,7702,7703],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[298,7703],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[7708,7709],{"type":2232,"score":2508},{"type":2336,"score":3441},[7711,7713,7715,7717,7718],{"type":2236,"url":7712},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":2236,"url":7714},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":2247,"url":7716},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":2244,"url":2778},{"type":2236,"url":3449},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":299,"slug":7721,"dossier":45,"summary":7722,"aliases":7723,"sourceIds":7726,"published":7727,"modified":7728,"checkedAt":7,"severity":7729,"references":7732,"versionKeys":7745,"packageCount":32,"repositoryCount":551},"ghsa-wp53-j4wj-2cfg-22cec3c5","Python-Multipart has Arbitrary File Write via Non-Default Configuration",[7724,7725],"CVE-2026-24486","PYSEC-2026-1852",[299,7725],"2026-01-26T23:28:05Z","2026-07-07T17:57:28.813401667Z",[7730],{"type":2232,"score":7731},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:H\u002FA:L",[7733,7735,7737,7739,7740,7742,7743],{"type":2247,"url":7734},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fsecurity\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",{"type":2236,"url":7736},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24486",{"type":2247,"url":7738},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Fcommit\u002F9433f4bbc9652bdde82bbe380984e32f8cfc89c4",{"type":2244,"url":3228},{"type":2247,"url":7741},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fpython-multipart\u002Freleases\u002Ftag\u002F0.0.22",{"type":2244,"url":3230},{"type":2236,"url":7744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wp53-j4wj-2cfg",[3403,3404,3234],{"id":300,"slug":7747,"dossier":45,"summary":7748,"aliases":7749,"sourceIds":7752,"published":7753,"modified":7754,"checkedAt":7,"severity":7755,"references":7758,"versionKeys":7777,"packageCount":32,"repositoryCount":34},"ghsa-wpfp-gwwc-vwq6-53d5ec36","LiteLLM allows a user to modify their own user_role via the \u002Fuser\u002Fupdate endpoint",[7750,7751],"CVE-2026-47102","PYSEC-2026-2600",[300,7751],"2026-05-21T21:30:37Z","2026-07-13T16:43:25.135559552Z",[7756,7757],{"type":2232,"score":3360},{"type":2336,"score":7037},[7759,7761,7763,7765,7767,7768,7769,7770,7771,7772,7774,7775],{"type":2236,"url":7760},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47102",{"type":2247,"url":7762},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fpull\u002F25541",{"type":2247,"url":7764},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002F128d32d2494b759c5d15da3452452af4c6a34c01",{"type":2247,"url":7766},"https:\u002F\u002Fgithub.com\u002FBerriAI\u002Flitellm\u002Fcommit\u002Fe6f18ce75b111c9b93dc15c72894cbdeb53177ce",{"type":2247,"url":7048},{"type":2244,"url":2856},{"type":2247,"url":2858},{"type":2247,"url":7053},{"type":2247,"url":7055},{"type":2247,"url":7773},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Flitellm-privilege-escalation-via-user-update",{"type":2244,"url":2860},{"type":2236,"url":7776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wpfp-gwwc-vwq6",[2864,2865,2866,2867],{"id":301,"slug":7779,"dossier":45,"summary":7780,"aliases":7781,"sourceIds":7784,"published":7785,"modified":7786,"checkedAt":7,"severity":7787,"references":7789,"versionKeys":7810,"packageCount":32,"repositoryCount":513},"ghsa-wqp7-x3pw-xc5r-4caabf81","Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",[7782,7783],"CVE-2026-48818","PYSEC-2026-2281",[301,7783],"2026-06-15T20:16:30Z","2026-07-13T07:26:44.976412482Z",[7788],{"type":2232,"score":3327},[7790,7792,7793,7795,7797,7799,7801,7802,7804,7806,7808],{"type":2236,"url":7791},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-wqp7-x3pw-xc5r",{"type":2244,"url":4154},{"type":2247,"url":7794},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-48818",{"type":2247,"url":7796},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-48818.json",{"type":2236,"url":7798},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30087",{"type":2236,"url":7800},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:30088",{"type":2236,"url":4576},{"type":2236,"url":7803},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Freleases\u002Ftag\u002F1.1.0",{"type":2513,"url":7805},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2490020",{"type":2241,"url":7807},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fcommit\u002Ffd53168a7767b6b55ba5af787fd88f49e33cabc5",{"type":2241,"url":7809},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fpull\u002F3287",[2322,2323,2324,4161,4162,4283,4284],{"id":302,"slug":7812,"dossier":45,"summary":7813,"aliases":7814,"sourceIds":7817,"published":7818,"modified":7819,"checkedAt":7,"severity":7820,"references":7822,"versionKeys":7839,"packageCount":32,"repositoryCount":601},"ghsa-wr9h-g72x-mwhm-9f241db1","vLLM is vulnerable to timing attack at bearer auth",[7815,7816],"CVE-2025-59425","PYSEC-2026-2026",[302,7816],"2025-10-07T17:24:47Z","2026-07-17T16:30:30.606191061Z",[7821],{"type":2232,"score":3327},[7823,7825,7827,7829,7831,7833,7834,7836,7838],{"type":2247,"url":7824},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2236,"url":7826},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-59425",{"type":2247,"url":7828},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fcommit\u002Fee10d7e6ff5875386c7f136ce8b5f525c8fcef48",{"type":2236,"url":7830},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wr9h-g72x-mwhm",{"type":2247,"url":7832},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fvllm\u002FPYSEC-2026-2026.yaml",{"type":2244,"url":2416},{"type":2247,"url":7835},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fblob\u002F4b946d693e0af15740e9ca9c0e059d5f333b1083\u002Fvllm\u002Fentrypoints\u002Fopenai\u002Fapi_server.py#L1270-L1274",{"type":2247,"url":7837},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Freleases\u002Ftag\u002Fv0.11.0",{"type":2244,"url":2412},[2434,2642],{"id":303,"slug":7841,"dossier":45,"summary":5845,"aliases":7842,"sourceIds":7845,"published":5850,"modified":7846,"checkedAt":7,"severity":7847,"references":7850,"versionKeys":7864,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[7843,7844],"CVE-2024-11393","PYSEC-2024-228",[303,7844],"2026-06-10T17:00:13.252500033Z",[7848,7849],{"type":2232,"score":5854},{"type":2232,"score":2399},[7851,7853,7854,7855,7856,7858,7860,7862],{"type":2236,"url":7852},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":2247,"url":5860},{"type":2247,"url":5862},{"type":2244,"url":2278},{"type":2247,"url":7857},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":2247,"url":7859},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":2236,"url":7861},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":2236,"url":7863},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[2285],{"id":304,"slug":7866,"dossier":45,"summary":7867,"aliases":7868,"sourceIds":7871,"published":7872,"modified":7873,"checkedAt":7,"severity":7874,"references":7881,"versionKeys":7900,"packageCount":32,"repositoryCount":582},"ghsa-x368-4g9h-fvv4-37873c2f","vLLM makes Use of Uninitialized Resource",[7869,7870],"CVE-2026-7141","PYSEC-2026-2306",[304,7870],"2026-04-27T17:16:45.637Z","2026-07-13T16:45:11.279169812Z",[7875,7877,7879],{"type":2232,"score":7876},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":2336,"score":7878},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":2336,"score":7880},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[7882,7884,7886,7888,7890,7892,7894,7896,7898],{"type":2236,"url":7883},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-7141",{"type":2513,"url":7885},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146",{"type":2513,"url":7887},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fissues\u002F39146#issue-4215090365",{"type":2241,"url":7889},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fpull\u002F39283",{"type":2241,"url":7891},"https:\u002F\u002Fgithub.com\u002FAjAnubolu\u002Fvllm\u002Fcommit\u002F1ad67864c0c20f167929e64c875f5c28e1aad9fd",{"type":2236,"url":7893},"https:\u002F\u002Fvuldb.com\u002Fsubmit\u002F801297",{"type":2236,"url":7895},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740",{"type":2513,"url":7897},"https:\u002F\u002Fvuldb.com\u002Fvuln\u002F359740\u002Fcti",{"type":2236,"url":7899},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-x368-4g9h-fvv4",[2434,2435,2642],{"id":305,"slug":7902,"dossier":45,"summary":7903,"aliases":7904,"sourceIds":7908,"published":7909,"modified":7910,"checkedAt":7,"severity":7911,"references":7916,"versionKeys":7932,"packageCount":32,"repositoryCount":601},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[7905,7906,7907],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[305],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[7912,7914],{"type":2232,"score":7913},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":2336,"score":7915},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[7917,7919,7921,7923,7925,7926,7928,7930],{"type":2236,"url":7918},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":2247,"url":7920},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":2247,"url":7922},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":2247,"url":7924},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":2244,"url":2520},{"type":2247,"url":7927},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":2247,"url":7929},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":2247,"url":7931},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[2532,2533],{"id":306,"slug":7934,"dossier":45,"summary":7935,"aliases":7936,"sourceIds":7939,"published":7940,"modified":7941,"checkedAt":7,"severity":7942,"references":7944,"versionKeys":7951,"packageCount":32,"repositoryCount":513},"ghsa-x746-7m8f-x49c-c0349d3f","Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`",[7937,7938],"CVE-2026-48817","PYSEC-2026-2280",[306,7938],"2026-06-15T20:16:05Z","2026-07-13T07:26:54.069698774Z",[7943],{"type":2232,"score":2449},[7945,7947,7949,7950],{"type":2236,"url":7946},"https:\u002F\u002Fgithub.com\u002FKludex\u002Fstarlette\u002Fsecurity\u002Fadvisories\u002FGHSA-x746-7m8f-x49c",{"type":2236,"url":7948},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-48817",{"type":2244,"url":4154},{"type":2236,"url":7803},[2322,2323,2324,4161,4162,4283,4284],{"id":307,"slug":7953,"dossier":45,"summary":7954,"aliases":7955,"sourceIds":7958,"published":7959,"modified":7960,"checkedAt":7,"severity":7961,"references":7964,"versionKeys":7970,"packageCount":32,"repositoryCount":502},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[7956,7957],"CVE-2026-54274","PYSEC-2026-2108",[307,7957],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[7962,7963],{"type":2336,"score":2827},{"type":2232,"score":2339},[7965,7967,7968],{"type":2236,"url":7966},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":2244,"url":2344},{"type":2241,"url":7969},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[2348,2349,2350,2351,2352,2353,2354,2355],{"id":308,"slug":7972,"dossier":45,"summary":7973,"aliases":7974,"sourceIds":7975,"published":7976,"modified":7977,"checkedAt":7,"severity":7978,"references":7980,"versionKeys":7987,"packageCount":32,"repositoryCount":582},"ghsa-xf7x-x43h-rpqh-c5648b04","json_repair: Circular JSON Schema `$ref` causes unbounded CPU DoS",[],[308],"2026-07-13T23:41:39Z","2026-07-13T23:45:11.773964507Z",[7979],{"type":2232,"score":2339},[7981,7983,7985],{"type":2247,"url":7982},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Fsecurity\u002Fadvisories\u002FGHSA-xf7x-x43h-rpqh",{"type":2244,"url":7984},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair",{"type":2247,"url":7986},"https:\u002F\u002Fgithub.com\u002Fmangiucugna\u002Fjson_repair\u002Freleases\u002Ftag\u002Fv0.60.1",[7988,7989,7990],"pypi:json-repair@0.35.0","pypi:json-repair@0.44.1","pypi:json-repair@0.47.6",{"id":309,"slug":7992,"dossier":45,"summary":7993,"aliases":7994,"sourceIds":7998,"published":7999,"modified":8000,"checkedAt":7,"severity":8001,"references":8004,"versionKeys":8018,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[7995,7996,7997],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[309,7997],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[8002],{"type":2232,"score":8003},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[8005,8007,8009,8011,8013,8015,8016],{"type":2236,"url":8006},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":2236,"url":8008},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":2247,"url":8010},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":2241,"url":8012},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":2247,"url":8014},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":2244,"url":2778},{"type":2247,"url":8017},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2785],{"id":310,"slug":8020,"dossier":45,"summary":8021,"aliases":8022,"sourceIds":8026,"published":8027,"modified":8028,"checkedAt":7,"severity":8029,"references":8032,"versionKeys":8043,"packageCount":32,"repositoryCount":102},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[8023,8024,8025],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[310,8025],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[8030],{"type":2232,"score":8031},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[8033,8035,8037,8039,8041,8042],{"type":2280,"url":8034},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":2236,"url":8036},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":2241,"url":8038},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":2241,"url":8040},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":2244,"url":2778},{"type":2236,"url":3475},[2782,2783,2784,2785,2786,2787,2788,2789],{"id":311,"slug":8045,"dossier":45,"summary":348,"aliases":8046,"sourceIds":8049,"published":8050,"modified":8051,"checkedAt":7,"severity":8052,"references":8054,"versionKeys":8063,"packageCount":32,"repositoryCount":601},"pysec-2025-198-62b25ed4",[8047,8048],"BIT-pytorch-2025-46148","CVE-2025-46148",[311],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[8053],{"type":2232,"score":4613},[8055,8057,8059,8061],{"type":2236,"url":8056},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":2236,"url":8058},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":2513,"url":8060},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":2241,"url":8062},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[2532,2533],{"id":312,"slug":8065,"dossier":45,"summary":348,"aliases":8066,"sourceIds":8069,"published":8070,"modified":8071,"checkedAt":7,"severity":8072,"references":8074,"versionKeys":8080,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[8067,8068],"BIT-pytorch-2025-46149","CVE-2025-46149",[312],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[8073],{"type":2232,"score":4613},[8075,8076,8078],{"type":2236,"url":8056},{"type":2513,"url":8077},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":2241,"url":8079},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[2533],{"id":313,"slug":8082,"dossier":45,"summary":348,"aliases":8083,"sourceIds":8086,"published":8087,"modified":8088,"checkedAt":7,"severity":8089,"references":8091,"versionKeys":8099,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[8084,8085],"BIT-pytorch-2025-46150","CVE-2025-46150",[313],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[8090],{"type":2232,"score":4613},[8092,8093,8095,8097],{"type":2236,"url":8056},{"type":2513,"url":8094},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":2513,"url":8096},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":2241,"url":8098},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[2533],{"id":314,"slug":8101,"dossier":45,"summary":348,"aliases":8102,"sourceIds":8105,"published":8106,"modified":8107,"checkedAt":7,"severity":8108,"references":8110,"versionKeys":8116,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[8103,8104],"BIT-pytorch-2025-46152","CVE-2025-46152",[314],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[8109],{"type":2232,"score":2303},[8111,8112,8114],{"type":2236,"url":8056},{"type":2513,"url":8113},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":2241,"url":8115},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[2533],{"id":315,"slug":8118,"dossier":45,"summary":348,"aliases":8119,"sourceIds":8122,"published":8123,"modified":8124,"checkedAt":7,"severity":8125,"references":8127,"versionKeys":8137,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[8120,8121],"BIT-pytorch-2025-46153","CVE-2025-46153",[315],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[8126],{"type":2232,"score":4613},[8128,8130,8131,8133,8135],{"type":2247,"url":8129},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":2236,"url":8056},{"type":2236,"url":8132},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":2513,"url":8134},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":2241,"url":8136},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[2533],{"id":316,"slug":8139,"dossier":45,"summary":348,"aliases":8140,"sourceIds":8143,"published":8144,"modified":8145,"checkedAt":7,"severity":8146,"references":8148,"versionKeys":8153,"packageCount":32,"repositoryCount":513},"pysec-2025-203-2febb201",[8141,8142],"BIT-pytorch-2025-55551","CVE-2025-55551",[316],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[8147],{"type":2232,"score":2339},[8149,8151],{"type":2236,"url":8150},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":2513,"url":8152},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[2532,2533,2534,4372,4373,6924],{"id":317,"slug":8155,"dossier":45,"summary":348,"aliases":8156,"sourceIds":8159,"published":8160,"modified":8161,"checkedAt":7,"severity":8162,"references":8164,"versionKeys":8168,"packageCount":32,"repositoryCount":513},"pysec-2025-204-cdae47da",[8157,8158],"BIT-pytorch-2025-55552","CVE-2025-55552",[317],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[8163],{"type":2232,"score":2339},[8165,8166],{"type":2236,"url":8150},{"type":2513,"url":8167},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[2532,2533,2534,4372,4373,6924],{"id":318,"slug":8170,"dossier":45,"summary":348,"aliases":8171,"sourceIds":8174,"published":8175,"modified":8176,"checkedAt":7,"severity":8177,"references":8179,"versionKeys":8185,"packageCount":32,"repositoryCount":582},"pysec-2025-205-fd5e58fd",[8172,8173],"BIT-pytorch-2025-55553","CVE-2025-55553",[318],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[8178],{"type":2232,"score":2339},[8180,8181,8183],{"type":2236,"url":8150},{"type":2513,"url":8182},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":2241,"url":8184},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[2532,2533,2534],{"id":319,"slug":8187,"dossier":45,"summary":348,"aliases":8188,"sourceIds":8191,"published":8192,"modified":8193,"checkedAt":7,"severity":8194,"references":8196,"versionKeys":8200,"packageCount":32,"repositoryCount":513},"pysec-2025-206-58322476",[8189,8190],"BIT-pytorch-2025-55554","CVE-2025-55554",[319],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[8195],{"type":2232,"score":2303},[8197,8198],{"type":2236,"url":8150},{"type":2513,"url":8199},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[2532,2533,2534,4372,4373,6924],{"id":320,"slug":8202,"dossier":45,"summary":348,"aliases":8203,"sourceIds":8206,"published":8207,"modified":8208,"checkedAt":7,"severity":8209,"references":8211,"versionKeys":8217,"packageCount":32,"repositoryCount":582},"pysec-2025-207-2abef3fc",[8204,8205],"BIT-pytorch-2025-55557","CVE-2025-55557",[320],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[8210],{"type":2232,"score":2339},[8212,8213,8215],{"type":2236,"url":8150},{"type":2513,"url":8214},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":2241,"url":8216},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[2532,2533,2534],{"id":321,"slug":8219,"dossier":45,"summary":348,"aliases":8220,"sourceIds":8223,"published":8224,"modified":8225,"checkedAt":7,"severity":8226,"references":8228,"versionKeys":8234,"packageCount":32,"repositoryCount":582},"pysec-2025-208-6e93fe9d",[8221,8222],"BIT-pytorch-2025-55558","CVE-2025-55558",[321],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[8227],{"type":2232,"score":2339},[8229,8230,8232],{"type":2236,"url":8150},{"type":2513,"url":8231},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":2241,"url":8233},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[2532,2533,2534],{"id":322,"slug":8236,"dossier":45,"summary":348,"aliases":8237,"sourceIds":8240,"published":8241,"modified":8242,"checkedAt":7,"severity":8243,"references":8245,"versionKeys":8251,"packageCount":32,"repositoryCount":582},"pysec-2025-209-e6f352b0",[8238,8239],"BIT-pytorch-2025-55560","CVE-2025-55560",[322],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[8244],{"type":2232,"score":2339},[8246,8247,8249],{"type":2236,"url":8150},{"type":2513,"url":8248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":2241,"url":8250},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[2532,2533,2534],{"id":323,"slug":8253,"dossier":45,"summary":348,"aliases":8254,"sourceIds":8256,"published":8257,"modified":8258,"checkedAt":7,"severity":8259,"references":8261,"versionKeys":8264,"packageCount":32,"repositoryCount":582},"pysec-2025-211-d8bd15de",[8255],"CVE-2025-14920",[323],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[8260],{"type":2232,"score":2271},[8262],{"type":2236,"url":8263},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[2285,2286,2287],{"id":324,"slug":8266,"dossier":45,"summary":348,"aliases":8267,"sourceIds":8269,"published":8270,"modified":8271,"checkedAt":7,"severity":8272,"references":8274,"versionKeys":8277,"packageCount":32,"repositoryCount":582},"pysec-2025-212-a011b97d",[8268],"CVE-2025-14921",[324],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[8273],{"type":2232,"score":2271},[8275],{"type":2236,"url":8276},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[2285,2286,2287],{"id":325,"slug":8279,"dossier":45,"summary":348,"aliases":8280,"sourceIds":8282,"published":8283,"modified":8284,"checkedAt":7,"severity":8285,"references":8287,"versionKeys":8290,"packageCount":32,"repositoryCount":582},"pysec-2025-213-9043dc9b",[8281],"CVE-2025-14924",[325],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[8286],{"type":2232,"score":2271},[8288],{"type":2236,"url":8289},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[2285,2286,2287],{"id":326,"slug":8292,"dossier":45,"summary":348,"aliases":8293,"sourceIds":8295,"published":8296,"modified":8297,"checkedAt":7,"severity":8298,"references":8300,"versionKeys":8303,"packageCount":32,"repositoryCount":582},"pysec-2025-214-eb241255",[8294],"CVE-2025-14926",[326],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[8299],{"type":2232,"score":2271},[8301],{"type":2236,"url":8302},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[2285,2286,2287],{"id":327,"slug":8305,"dossier":45,"summary":348,"aliases":8306,"sourceIds":8308,"published":8309,"modified":8310,"checkedAt":7,"severity":8311,"references":8313,"versionKeys":8316,"packageCount":32,"repositoryCount":582},"pysec-2025-215-6064f491",[8307],"CVE-2025-14927",[327],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[8312],{"type":2232,"score":2271},[8314],{"type":2236,"url":8315},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[2285,2286,2287],{"id":328,"slug":8318,"dossier":45,"summary":348,"aliases":8319,"sourceIds":8321,"published":8322,"modified":8323,"checkedAt":7,"severity":8324,"references":8326,"versionKeys":8329,"packageCount":32,"repositoryCount":582},"pysec-2025-216-5708ed01",[8320],"CVE-2025-14928",[328],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[8325],{"type":2232,"score":2271},[8327],{"type":2236,"url":8328},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[2285,2286,2287],{"id":329,"slug":8331,"dossier":45,"summary":348,"aliases":8332,"sourceIds":8334,"published":8335,"modified":8336,"checkedAt":7,"severity":8337,"references":8339,"versionKeys":8342,"packageCount":32,"repositoryCount":513},"pysec-2025-217-2c1ad388",[8333],"CVE-2025-14929",[329],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[8338],{"type":2232,"score":2271},[8340],{"type":2236,"url":8341},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[2285,2286,2287,2288,2289,2290,2291],{"id":330,"slug":8344,"dossier":45,"summary":348,"aliases":8345,"sourceIds":8347,"published":8348,"modified":8349,"checkedAt":7,"severity":8350,"references":8352,"versionKeys":8355,"packageCount":32,"repositoryCount":551},"pysec-2025-218-39811fc3",[8346],"CVE-2025-14930",[330],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[8351],{"type":2232,"score":2271},[8353],{"type":2236,"url":8354},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[2285,2286,2287,2288],{"id":331,"slug":8357,"dossier":45,"summary":348,"aliases":8358,"sourceIds":8361,"published":8362,"modified":8363,"checkedAt":7,"severity":8364,"references":8366,"versionKeys":8377,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[8359,8360],"BIT-pytorch-2026-4538","CVE-2026-4538",[331],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[8365],{"type":2232,"score":6796},[8367,8369,8371,8373,8375],{"type":2247,"url":8368},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":2236,"url":8370},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":2236,"url":8372},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":2513,"url":8374},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":2241,"url":8376},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[7258,2532,2533,2534,4372,4373,6924,6925,6926],{"id":332,"slug":8379,"dossier":89,"summary":348,"aliases":8380,"sourceIds":8383,"published":8384,"modified":8385,"checkedAt":7,"severity":8386,"references":8389,"versionKeys":8402,"packageCount":32,"repositoryCount":5621},"pysec-2026-2132-627bf7c7",[8381,8382],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[332],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[8387],{"type":2232,"score":8388},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[8390,8392,8394,8395,8396,8398,8400],{"type":2247,"url":8391},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":2247,"url":8393},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":2236,"url":6070},{"type":2236,"url":6072},{"type":2513,"url":8397},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":2241,"url":8399},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":2280,"url":8401},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[8403,8404,8405,8406,8407,8408],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":333,"slug":8410,"dossier":45,"summary":348,"aliases":8411,"sourceIds":8414,"published":8415,"modified":8416,"checkedAt":7,"severity":8417,"references":8419,"versionKeys":8422,"packageCount":32,"repositoryCount":582},"pysec-2026-227-5f5a1d28",[8412,8413],"CVE-2026-54232","GHSA-jrf6-vqxq-pjv2",[333],"2026-06-22T23:16:30.873Z","2026-06-26T00:00:06.054142968Z",[8418],{"type":2232,"score":2399},[8420],{"type":2280,"url":8421},"https:\u002F\u002Fgithub.com\u002Fvllm-project\u002Fvllm\u002Fsecurity\u002Fadvisories\u002FGHSA-jrf6-vqxq-pjv2",[2434,2435,2642],{"id":334,"slug":8424,"dossier":45,"summary":348,"aliases":8425,"sourceIds":8430,"published":8431,"modified":8432,"checkedAt":7,"severity":8433,"references":8435,"versionKeys":8451,"packageCount":32,"repositoryCount":502},"pysec-2026-2286-8795b007",[8426,8427,8428,8429],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[334],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[8434],{"type":2232,"score":2399},[8436,8438,8440,8441,8443,8445,8447,8449],{"type":2247,"url":8437},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":2247,"url":8439},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":2236,"url":4092},{"type":2236,"url":8442},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":2236,"url":8444},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":2513,"url":8446},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":2513,"url":8448},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":2241,"url":8450},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[2532,2533,2534,4372,4373,6924,6925,6926],{"id":335,"slug":8453,"dossier":45,"summary":348,"aliases":8454,"sourceIds":8456,"published":8457,"modified":8458,"checkedAt":7,"severity":8459,"references":8461,"versionKeys":8471,"packageCount":32,"repositoryCount":582},"pysec-2026-2302-60c0b148",[8455],"CVE-2026-5497",[335],"2026-06-11T10:16:21.903Z","2026-07-13T07:15:46.584903724Z",[8460],{"type":2232,"score":2339},[8462,8464,8466,8468,8469],{"type":2247,"url":8463},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5497",{"type":2247,"url":8465},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5497.json",{"type":2513,"url":8467},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487813",{"type":2241,"url":6666},{"type":2280,"url":8470},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7bd92629-b396-4449-8f88-6c0092530eb4",[2434,2435,2642],1786591830662]