[{"data":1,"prerenderedAt":3143},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-6174":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":181,"related":184},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":99,"artifactResolvedComponentCount":99,"exactManifestPinCount":37,"packageCount":99,"ecosystems":100,"aiPackageCount":102,"licenseExpressionCount":103,"unknownLicensePackageCount":32,"advisoryIds":104,"advisoryCount":179,"providers":180},"opencode:6174","opencode-6174",6174,"Energieautarkes Wohnquartier - Backend","energieautarkes-wohnquartier\u002Fbackend","This Python-based REST API delivers energy simulation data for the “Energieautarkes Wohnquartier” project. It provides both precomputed results for various building and system configurations, as well as real-time predictions using a machine learning model trained on over 3,300 high-fidelity SimulationX simulations.\r\n\r\nThe API can be used alongside the separately developed React\u002FThree.js frontend to enable real-time evaluation of user-defined scenarios. Deterministic simulations and ML-based regression are combined to ensure fast and accurate responses, even for previously unseen configurations.","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend","fc7e24cd546449ac9fdee4ad78aab861e0c89666","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fcommit\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666","2026-04-15T13:18:54.254Z","2026-04-15T13:22:39.000Z",{"complete":89,"entryCount":90,"truncated":45},true,78,[92],{"path":55,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},"poetry-lock","dc5008ef9fba69d70ea9e7b3fea21265fa5ef93d","https:\u002F\u002Fgitlab.opencode.de\u002Fenergieautarkes-wohnquartier\u002Fbackend\u002F-\u002Fblob\u002Ffc7e24cd546449ac9fdee4ad78aab861e0c89666\u002Fpoetry.lock","6876a231ced00a8d5ac3f1a8fa53fd89e79d737091ef2925e25665b04e92e693",200089,"parsed",81,[101],"pypi",2,11,[105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178],"GHSA-248v-346w-9cwc","GHSA-26c4-7vv6-867j","GHSA-29vq-49wr-vm6x","GHSA-2g68-c3qc-8985","GHSA-2xpw-w6gg-jr37","GHSA-36fq-jgmw-4r9c","GHSA-36rr-ww3j-vrjv","GHSA-38jv-5279-wg99","GHSA-3m4q-jmj6-r34q","GHSA-43qf-4rqw-9q2g","GHSA-45hq-cxwh-f6vc","GHSA-48p4-8xcf-vxj5","GHSA-4f3f-g24h-fr8m","GHSA-4x4j-2g7c-83w6","GHSA-5239-wwwm-4pmq","GHSA-58hv-7753-xmfq","GHSA-5gwj-m78q-7pq3","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-65pc-fj4g-8rjx","GHSA-68rp-wp8r-4726","GHSA-6r8x-57c9-28j4","GHSA-768j-98cg-p3fv","GHSA-7gcm-g887-7qv7","GHSA-7rxf-gvfg-47g4","GHSA-84pr-m4jr-85g5","GHSA-87hc-h4r5-73f7","GHSA-8qvm-5x2c-j2w7","GHSA-8rrh-rw8j-w5fx","GHSA-8v84-f9pq-wr9x","GHSA-8vgw-p6qm-5gr7","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-c9rc-mg46-23w3","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cx63-2mw6-8hw5","GHSA-f9vj-2wh5-fj8j","GHSA-fj7v-r99m-22gq","GHSA-gc5v-m9x4-r6x2","GHSA-gh82-f9x8-5frx","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-hgf8-39gv-g3f2","GHSA-hjqc-jx6g-rwp9","GHSA-hqp4-2352-xf5r","GHSA-hxwh-jpp2-84pm","GHSA-jjj6-mw9f-p565","GHSA-m8wh-29wm-52mv","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mgx6-5cf9-rr43","GHSA-mq84-hjqx-cwf2","GHSA-pg7v-jwj7-p798","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2x7-8rv6-6q7h","GHSA-q34m-jh98-gwm2","GHSA-qccp-gfcp-xxvc","GHSA-r73j-pqj5-w3x7","GHSA-v2w2-w228-c444","GHSA-vjc4-5qp5-m44j","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-xg8h-j46f-w952","GHSA-xj96-63gp-2gmr","PYSEC-2026-2132",74,[],{"files":182,"occurrenceCount":99},[183],{"path":55,"kind":93,"blobSha":94,"sourceUrl":95,"commitSha":84,"contentSha256":96,"byteCount":97,"state":98,"componentCount":99},{"packages":185,"vulnerabilities":926},[186,198,208,220,230,241,250,260,269,279,288,297,307,316,325,334,343,352,362,371,380,389,398,407,416,425,434,443,452,461,470,479,488,497,506,515,524,533,542,551,560,569,578,587,596,606,615,624,632,640,648,657,666,675,684,693,702,710,719,728,738,747,756,765,774,783,792,801,810,819,828,837,846,855,863,872,881,890,899,909,917],{"id":187,"slug":188,"identity":189,"label":190,"aiRelevant":89,"provider":191,"advisoryCount":37,"licenseExpressions":192,"versions":195,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":197},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",null,[193,194],"BSD-3-Clause","non-standard",[196],"1.6.1",[55],{"id":199,"slug":200,"identity":201,"label":202,"aiRelevant":89,"provider":191,"advisoryCount":37,"licenseExpressions":203,"versions":205,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":207},"package:pypi:tensorflow","tensorflow-b039ea09","pypi:tensorflow","TensorFlow",[204],"Apache-2.0",[206],"2.19.0",[55],{"id":209,"slug":210,"identity":211,"label":212,"aiRelevant":45,"provider":191,"advisoryCount":213,"licenseExpressions":214,"versions":217,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":219},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[215,216],"HPND","MIT-CMU",[218],"11.2.1",[55],{"id":221,"slug":222,"identity":223,"label":224,"aiRelevant":45,"provider":191,"advisoryCount":225,"licenseExpressions":226,"versions":227,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":229},"package:pypi:keras","keras-33e438c4","pypi:keras","keras",15,[204],[228],"3.9.2",[55],{"id":231,"slug":232,"identity":233,"label":234,"aiRelevant":45,"provider":191,"advisoryCount":235,"licenseExpressions":236,"versions":238,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":240},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[237],"MIT",[239],"2.4.0",[55],{"id":242,"slug":243,"identity":244,"label":245,"aiRelevant":45,"provider":191,"advisoryCount":64,"licenseExpressions":246,"versions":247,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":249},"package:pypi:werkzeug","werkzeug-b18d5b02","pypi:werkzeug","werkzeug",[193,194],[248],"3.1.3",[55],{"id":251,"slug":252,"identity":253,"label":254,"aiRelevant":45,"provider":191,"advisoryCount":255,"licenseExpressions":256,"versions":257,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":259},"package:pypi:flask-cors","flask-cors-348fb6bb","pypi:flask-cors","flask-cors",5,[237],[258],"5.0.1",[55],{"id":261,"slug":262,"identity":263,"label":264,"aiRelevant":45,"provider":191,"advisoryCount":34,"licenseExpressions":265,"versions":266,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":268},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[193,194],[267],"3.1.6",[55],{"id":270,"slug":271,"identity":272,"label":273,"aiRelevant":45,"provider":191,"advisoryCount":274,"licenseExpressions":275,"versions":276,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":278},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[204],[277],"2.32.3",[55],{"id":280,"slug":281,"identity":282,"label":283,"aiRelevant":45,"provider":191,"advisoryCount":274,"licenseExpressions":284,"versions":285,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":287},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[237],[286],"80.4.0",[55],{"id":289,"slug":290,"identity":291,"label":292,"aiRelevant":45,"provider":191,"advisoryCount":102,"licenseExpressions":293,"versions":294,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":296},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[193],[295],"5.29.4",[55],{"id":298,"slug":299,"identity":300,"label":301,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":302,"versions":304,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":306},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[303],"MPL-2.0",[305],"2025.4.26",[55],{"id":308,"slug":309,"identity":310,"label":311,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":312,"versions":313,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":315},"package:pypi:click","click-ef97f731","pypi:click","click",[193,194],[314],"8.2.0",[55],{"id":317,"slug":318,"identity":319,"label":320,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":321,"versions":322,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":324},"package:pypi:flask","flask-734a8b3c","pypi:flask","flask",[193,194],[323],"3.1.1",[55],{"id":326,"slug":327,"identity":328,"label":329,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":330,"versions":331,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":333},"package:pypi:fonttools","fonttools-d2488ea8","pypi:fonttools","fonttools",[237],[332],"4.58.0",[55],{"id":335,"slug":336,"identity":337,"label":338,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":339,"versions":340,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":342},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[193,194],[341],"3.10",[55],{"id":344,"slug":345,"identity":346,"label":347,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":348,"versions":349,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":351},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[193],[350],"3.8",[55],{"id":353,"slug":354,"identity":355,"label":356,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":357,"versions":359,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":361},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[358],"BSD-2-Clause",[360],"2.19.1",[55],{"id":363,"slug":364,"identity":365,"label":366,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":367,"versions":368,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":370},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[193],[369],"1.1.0",[55],{"id":372,"slug":373,"identity":374,"label":375,"aiRelevant":45,"provider":191,"advisoryCount":32,"licenseExpressions":376,"versions":377,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":379},"package:pypi:wheel","wheel-17857b9a","pypi:wheel","wheel",[237],[378],"0.45.1",[55],{"id":381,"slug":382,"identity":383,"label":384,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":385,"versions":386,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":388},"package:pypi:absl-py","absl-py-50126725","pypi:absl-py","absl-py",[204],[387],"2.2.2",[55],{"id":390,"slug":391,"identity":392,"label":393,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":394,"versions":395,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":397},"package:pypi:astunparse","astunparse-16fbaa64","pypi:astunparse","astunparse",[194],[396],"1.6.3",[55],{"id":399,"slug":400,"identity":401,"label":402,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":403,"versions":404,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":406},"package:pypi:blinker","blinker-409e1445","pypi:blinker","blinker",[237],[405],"1.9.0",[55],{"id":408,"slug":409,"identity":410,"label":411,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":412,"versions":413,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":415},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[237],[414],"3.4.2",[55],{"id":417,"slug":418,"identity":419,"label":420,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":421,"versions":422,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":424},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[194],[423],"0.4.6",[55],{"id":426,"slug":427,"identity":428,"label":429,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":430,"versions":431,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":433},"package:pypi:compress-json","compress-json-58c09309","pypi:compress-json","compress-json",[237],[432],"1.1.1",[55],{"id":435,"slug":436,"identity":437,"label":438,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":439,"versions":440,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":442},"package:pypi:contourpy","contourpy-f86f9e10","pypi:contourpy","contourpy",[194],[441],"1.3.2",[55],{"id":444,"slug":445,"identity":446,"label":447,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":448,"versions":449,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":451},"package:pypi:cycler","cycler-3e14883d","pypi:cycler","cycler",[194],[450],"0.12.1",[55],{"id":453,"slug":454,"identity":455,"label":456,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":457,"versions":458,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":460},"package:pypi:flatbuffers","flatbuffers-90c67795","pypi:flatbuffers","flatbuffers",[204],[459],"25.2.10",[55],{"id":462,"slug":463,"identity":464,"label":465,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":466,"versions":467,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":469},"package:pypi:gast","gast-1c13a212","pypi:gast","gast",[193],[468],"0.6.0",[55],{"id":471,"slug":472,"identity":473,"label":474,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":475,"versions":476,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":478},"package:pypi:google-pasta","google-pasta-35d2f77c","pypi:google-pasta","google-pasta",[204],[477],"0.2.0",[55],{"id":480,"slug":481,"identity":482,"label":483,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":484,"versions":485,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":487},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[204],[486],"1.71.0",[55],{"id":489,"slug":490,"identity":491,"label":492,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":493,"versions":494,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":496},"package:pypi:gunicorn","gunicorn-a765d3c5","pypi:gunicorn","gunicorn",[237],[495],"23.0.0",[55],{"id":498,"slug":499,"identity":500,"label":501,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":502,"versions":503,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":505},"package:pypi:h5py","h5py-b8fe3869","pypi:h5py","h5py",[193],[504],"3.13.0",[55],{"id":507,"slug":508,"identity":509,"label":510,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":511,"versions":512,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":514},"package:pypi:itsdangerous","itsdangerous-4af70837","pypi:itsdangerous","itsdangerous",[193,194],[513],"2.2.0",[55],{"id":516,"slug":517,"identity":518,"label":519,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":520,"versions":521,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":523},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[193],[522],"1.5.0",[55],{"id":525,"slug":526,"identity":527,"label":528,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":529,"versions":530,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":532},"package:pypi:kiwisolver","kiwisolver-41b47c33","pypi:kiwisolver","kiwisolver",[194],[531],"1.4.8",[55],{"id":534,"slug":535,"identity":536,"label":537,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":538,"versions":539,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":541},"package:pypi:libclang","libclang-2322c840","pypi:libclang","libclang",[204],[540],"18.1.1",[55],{"id":543,"slug":544,"identity":545,"label":546,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":547,"versions":548,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":550},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[237],[549],"3.0.0",[55],{"id":552,"slug":553,"identity":554,"label":555,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":556,"versions":557,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":559},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[193,194],[558],"3.0.2",[55],{"id":561,"slug":562,"identity":563,"label":564,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":565,"versions":566,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":568},"package:pypi:matplotlib","matplotlib-9dc72309","pypi:matplotlib","matplotlib",[194],[567],"3.10.3",[55],{"id":570,"slug":571,"identity":572,"label":573,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":574,"versions":575,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":577},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[237],[576],"0.1.2",[55],{"id":579,"slug":580,"identity":581,"label":582,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":583,"versions":584,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":586},"package:pypi:ml-dtypes","ml-dtypes-eed9ce80","pypi:ml-dtypes","ml-dtypes",[194],[585],"0.5.1",[55],{"id":588,"slug":589,"identity":590,"label":591,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":592,"versions":593,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":595},"package:pypi:namex","namex-fd46fa7e","pypi:namex","namex",[],[594],"0.0.9",[55],{"id":597,"slug":598,"identity":599,"label":600,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":601,"versions":603,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":605},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[602,194],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[604],"2.1.3",[55],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":611,"versions":612,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":614},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[194],[613],"12.5.3.2",[55],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":620,"versions":621,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":623},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[194],[622],"12.5.82",[55],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":629,"versions":630,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":631},"package:pypi:nvidia-cuda-nvcc-cu12","nvidia-cuda-nvcc-cu12-0e108124","pypi:nvidia-cuda-nvcc-cu12","nvidia-cuda-nvcc-cu12",[194],[622],[55],{"id":633,"slug":634,"identity":635,"label":636,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":637,"versions":638,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":639},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[194],[622],[55],{"id":641,"slug":642,"identity":643,"label":644,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":645,"versions":646,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":647},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[194],[622],[55],{"id":649,"slug":650,"identity":651,"label":652,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":653,"versions":654,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":656},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[194],[655],"9.3.0.75",[55],{"id":658,"slug":659,"identity":660,"label":661,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":662,"versions":663,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":665},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[194],[664],"11.2.3.61",[55],{"id":667,"slug":668,"identity":669,"label":670,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":671,"versions":672,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":674},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[194],[673],"10.3.6.82",[55],{"id":676,"slug":677,"identity":678,"label":679,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":680,"versions":681,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":683},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[194],[682],"11.6.3.83",[55],{"id":685,"slug":686,"identity":687,"label":688,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":689,"versions":690,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":692},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[194],[691],"12.5.1.3",[55],{"id":694,"slug":695,"identity":696,"label":697,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":698,"versions":699,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":701},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[193,194],[700],"2.23.4",[55],{"id":703,"slug":704,"identity":705,"label":706,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":707,"versions":708,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":709},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[194],[622],[55],{"id":711,"slug":712,"identity":713,"label":714,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":715,"versions":716,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":718},"package:pypi:opt-einsum","opt-einsum-73c64c2e","pypi:opt-einsum","opt-einsum",[237],[717],"3.4.0",[55],{"id":720,"slug":721,"identity":722,"label":723,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":724,"versions":725,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":727},"package:pypi:optree","optree-0d91febb","pypi:optree","optree",[204],[726],"0.15.0",[55],{"id":729,"slug":730,"identity":731,"label":732,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":733,"versions":735,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":737},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[734,194],"Apache-2.0 OR BSD-2-Clause",[736],"25.0",[55],{"id":739,"slug":740,"identity":741,"label":742,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":743,"versions":744,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":746},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[194],[745],"2.2.3",[55],{"id":748,"slug":749,"identity":750,"label":751,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":752,"versions":753,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":755},"package:pypi:plot-keras-history","plot-keras-history-fe86c5d6","pypi:plot-keras-history","plot-keras-history",[237],[754],"1.1.39",[55],{"id":757,"slug":758,"identity":759,"label":760,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":761,"versions":762,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":764},"package:pypi:psutil","psutil-840b9a74","pypi:psutil","psutil",[193],[763],"7.0.0",[55],{"id":766,"slug":767,"identity":768,"label":769,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":770,"versions":771,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":773},"package:pypi:pyparsing","pyparsing-a28b9b62","pypi:pyparsing","pyparsing",[237],[772],"3.2.3",[55],{"id":775,"slug":776,"identity":777,"label":778,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":779,"versions":780,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":782},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[194],[781],"2.9.0.post0",[55],{"id":784,"slug":785,"identity":786,"label":787,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":788,"versions":789,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":791},"package:pypi:python-magic","python-magic-28c4094a","pypi:python-magic","python-magic",[237],[790],"0.4.27",[55],{"id":793,"slug":794,"identity":795,"label":796,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":797,"versions":798,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":800},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[237],[799],"2025.2",[55],{"id":802,"slug":803,"identity":804,"label":805,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":806,"versions":807,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":809},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[237],[808],"14.0.0",[55],{"id":811,"slug":812,"identity":813,"label":814,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":815,"versions":816,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":818},"package:pypi:ruff","ruff-d5943bdf","pypi:ruff","ruff",[237],[817],"0.11.10",[55],{"id":820,"slug":821,"identity":822,"label":823,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":824,"versions":825,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":827},"package:pypi:sanitize-ml-labels","sanitize-ml-labels-c9346ff6","pypi:sanitize-ml-labels","sanitize-ml-labels",[237],[826],"1.1.4",[55],{"id":829,"slug":830,"identity":831,"label":832,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":833,"versions":834,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":836},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[194],[835],"1.15.3",[55],{"id":838,"slug":839,"identity":840,"label":841,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":842,"versions":843,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":845},"package:pypi:six","six-3c3888bd","pypi:six","six",[237],[844],"1.17.0",[55],{"id":847,"slug":848,"identity":849,"label":850,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":851,"versions":852,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":854},"package:pypi:tabulate","tabulate-f0392898","pypi:tabulate","tabulate",[237],[853],"0.9.0",[55],{"id":856,"slug":857,"identity":858,"label":859,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":860,"versions":861,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":862},"package:pypi:tensorboard","tensorboard-f5e14cf1","pypi:tensorboard","tensorboard",[204],[206],[55],{"id":864,"slug":865,"identity":866,"label":867,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":868,"versions":869,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":871},"package:pypi:tensorboard-data-server","tensorboard-data-server-d2a4e5d5","pypi:tensorboard-data-server","tensorboard-data-server",[204],[870],"0.7.2",[55],{"id":873,"slug":874,"identity":875,"label":876,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":877,"versions":878,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":880},"package:pypi:tensorflow-io-gcs-filesystem","tensorflow-io-gcs-filesystem-1c9c0ea8","pypi:tensorflow-io-gcs-filesystem","tensorflow-io-gcs-filesystem",[204],[879],"0.37.1",[55],{"id":882,"slug":883,"identity":884,"label":885,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":886,"versions":887,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":889},"package:pypi:termcolor","termcolor-7ed3cb9a","pypi:termcolor","termcolor",[237],[888],"3.1.0",[55],{"id":891,"slug":892,"identity":893,"label":894,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":895,"versions":896,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":898},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[193],[897],"3.6.0",[55],{"id":900,"slug":901,"identity":902,"label":903,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":904,"versions":906,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":908},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[905,194],"PSF-2.0",[907],"4.13.2",[55],{"id":910,"slug":911,"identity":912,"label":913,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":914,"versions":915,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":916},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[204],[799],[55],{"id":918,"slug":919,"identity":920,"label":921,"aiRelevant":45,"provider":191,"advisoryCount":37,"licenseExpressions":922,"versions":923,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":925},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[194],[924],"1.17.2",[55],[927,966,999,1031,1064,1096,1125,1150,1177,1207,1239,1273,1299,1325,1354,1394,1426,1455,1492,1522,1545,1569,1599,1626,1656,1682,1713,1752,1778,1806,1830,1862,1895,1918,1944,1978,2004,2034,2059,2115,2147,2178,2206,2234,2261,2289,2312,2340,2374,2408,2432,2464,2503,2544,2571,2601,2623,2653,2685,2714,2741,2765,2789,2816,2843,2877,2898,2926,2954,2982,3034,3057,3085,3110],{"id":105,"slug":928,"dossier":45,"summary":929,"aliases":930,"sourceIds":933,"published":934,"modified":935,"checkedAt":7,"severity":936,"references":940,"versionKeys":964,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[931,932],"CVE-2024-39689","PYSEC-2024-230",[105,932],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[937],{"type":938,"score":939},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[941,944,946,949,952,955,958,960,962],{"type":942,"url":943},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":942,"url":945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":947,"url":948},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":950,"url":951},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":953,"url":954},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":956,"url":957},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":953,"url":959},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":942,"url":961},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":942,"url":963},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[965],"pypi:certifi@2024.6.2",{"id":106,"slug":967,"dossier":45,"summary":968,"aliases":969,"sourceIds":972,"published":973,"modified":974,"checkedAt":7,"severity":975,"references":978,"versionKeys":997,"packageCount":32,"repositoryCount":32},"ghsa-26c4-7vv6-867j-2abfb078","Keras: HDF5 virtual datasets can disclose local files",[970,971],"CVE-2026-12480","PYSEC-2026-3629",[106,971],"2026-07-01T18:31:51Z","2026-08-10T11:40:53.891931306Z",[976],{"type":938,"score":977},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[979,981,983,985,987,989,991,993,995],{"type":942,"url":980},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12480",{"type":953,"url":982},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F8f987f11bf7512f0df4774a8f1557bba07dc2b49",{"type":953,"url":984},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Fd5a88bdb137c0d3039b8f4bbbe8c7099925cc10c",{"type":950,"url":986},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras",{"type":953,"url":988},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.12.3",{"type":953,"url":990},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.15.0",{"type":953,"url":992},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1875d257-5b03-4a69-ac70-e98653fa12c7",{"type":950,"url":994},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fkeras",{"type":942,"url":996},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-26c4-7vv6-867j",[998],"pypi:keras@3.9.2",{"id":107,"slug":1000,"dossier":45,"summary":1001,"aliases":1002,"sourceIds":1005,"published":1006,"modified":1007,"checkedAt":7,"severity":1008,"references":1014,"versionKeys":1025,"packageCount":32,"repositoryCount":64},"ghsa-29vq-49wr-vm6x-7d88633b","Werkzeug safe_join() allows Windows special device names",[1003,1004],"CVE-2026-27199","PYSEC-2026-2320",[107,1004],"2026-02-19T20:32:45Z","2026-07-13T07:26:55.904978535Z",[1009,1012],{"type":1010,"score":1011},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",{"type":938,"score":1013},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1015,1017,1019,1021,1023],{"type":942,"url":1016},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-29vq-49wr-vm6x",{"type":942,"url":1018},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27199",{"type":947,"url":1020},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Ff407712fdc60a09c2b3f4fe7db557703e5d9338d",{"type":950,"url":1022},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug",{"type":942,"url":1024},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.6",[1026,1027,1028,1029,1030],"pypi:werkzeug@3.0.1","pypi:werkzeug@3.0.6","pypi:werkzeug@3.1.1","pypi:werkzeug@3.1.3","pypi:werkzeug@3.1.5",{"id":108,"slug":1032,"dossier":45,"summary":1033,"aliases":1034,"sourceIds":1037,"published":1038,"modified":1039,"checkedAt":7,"severity":1040,"references":1043,"versionKeys":1063,"packageCount":32,"repositoryCount":32},"ghsa-2g68-c3qc-8985-d6075eca","Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain",[1035,1036],"CVE-2024-34069","PYSEC-2026-2043",[108,1036],"2024-05-06T14:21:27Z","2026-07-07T17:56:15.006571356Z",[1041],{"type":938,"score":1042},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1044,1046,1048,1050,1051,1053,1055,1057,1059,1061],{"type":953,"url":1045},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",{"type":942,"url":1047},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34069",{"type":953,"url":1049},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F3386395b24c7371db11a5b8eaac0c91da5362692",{"type":950,"url":1022},{"type":953,"url":1052},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F02\u002Fmsg00026.html",{"type":953,"url":1054},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FH4SH32AM3CTPMAAEOIDAN7VU565LO4IR",{"type":953,"url":1056},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FHFERFN7PINV4MOGMGA3DPIXJPDCYOEJZ",{"type":953,"url":1058},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240614-0004",{"type":950,"url":1060},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwerkzeug",{"type":942,"url":1062},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g68-c3qc-8985",[1026],{"id":109,"slug":1065,"dossier":89,"summary":1066,"aliases":1067,"sourceIds":1070,"published":1071,"modified":1072,"checkedAt":7,"severity":1073,"references":1076,"versionKeys":1089,"packageCount":32,"repositoryCount":1095},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1068,1069],"CVE-2025-66471","PYSEC-2026-1994",[109,1069],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1074],{"type":1010,"score":1075},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1077,1079,1081,1083,1085,1087],{"type":953,"url":1078},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":942,"url":1080},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":947,"url":1082},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":950,"url":1084},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":950,"url":1086},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":942,"url":1088},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1090,1091,1092,1093,1094],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":110,"slug":1097,"dossier":45,"summary":1098,"aliases":1099,"sourceIds":1102,"published":1103,"modified":1104,"checkedAt":7,"severity":1105,"references":1110,"versionKeys":1124,"packageCount":32,"repositoryCount":32},"ghsa-36fq-jgmw-4r9c-8dbce69b","Keras is vulnerable to Deserialization of Untrusted Data",[1100,1101],"CVE-2025-9906","PYSEC-2025-76",[110],"2025-09-19T09:31:14Z","2026-07-16T18:59:35.179790998Z",[1106,1108],{"type":938,"score":1107},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1010,"score":1109},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1111,1113,1115,1117,1118,1120,1122],{"type":942,"url":1112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-9906",{"type":953,"url":1114},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21429",{"type":953,"url":1116},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F713172ab56b864e59e2aa79b1a51b0e728bba858",{"type":950,"url":986},{"type":953,"url":1119},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.11.0",{"type":953,"url":1121},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-76.yaml",{"type":953,"url":1123},"https:\u002F\u002Fosv.dev\u002Fvulnerability\u002FCVE-2025-9906",[998],{"id":111,"slug":1126,"dossier":45,"summary":1127,"aliases":1128,"sourceIds":1131,"published":1132,"modified":1133,"checkedAt":7,"severity":1134,"references":1138,"versionKeys":1149,"packageCount":32,"repositoryCount":32},"ghsa-36rr-ww3j-vrjv-6da4d3b0","The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`\u002F`.hdf5` file is loaded.",[1129,1130],"CVE-2025-9905","PYSEC-2025-123",[111,1130],"2025-09-19T09:15:36.033Z","2026-06-06T00:45:42.787604478Z",[1135,1137],{"type":1010,"score":1136},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",{"type":938,"score":1107},[1139,1142,1144,1146,1147],{"type":1140,"url":1141},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-36rr-ww3j-vrjv",{"type":942,"url":1143},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-9905",{"type":947,"url":1145},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21602",{"type":950,"url":986},{"type":953,"url":1148},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-123.yaml",[998],{"id":112,"slug":1151,"dossier":89,"summary":1152,"aliases":1153,"sourceIds":1156,"published":1157,"modified":1158,"checkedAt":7,"severity":1159,"references":1163,"versionKeys":1176,"packageCount":32,"repositoryCount":1095},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1154,1155],"CVE-2026-21441","PYSEC-2026-1996",[112,1155],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1160,1162],{"type":938,"score":1161},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1010,"score":1075},[1164,1166,1168,1170,1171,1173,1174],{"type":953,"url":1165},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":942,"url":1167},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":947,"url":1169},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":950,"url":1084},{"type":953,"url":1172},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":950,"url":1086},{"type":942,"url":1175},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1090,1091,1092,1093,1094],{"id":113,"slug":1178,"dossier":45,"summary":1179,"aliases":1180,"sourceIds":1183,"published":1184,"modified":1185,"checkedAt":7,"severity":1186,"references":1189,"versionKeys":1206,"packageCount":32,"repositoryCount":32},"ghsa-3m4q-jmj6-r34q-1cef6cd5","Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading",[1181,1182],"CVE-2026-1669","PYSEC-2026-2546",[113,1182],"2026-02-18T22:41:58Z","2026-07-13T16:42:53.746237646Z",[1187],{"type":938,"score":1188},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[1190,1192,1194,1196,1198,1199,1201,1203,1204],{"type":953,"url":1191},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-3m4q-jmj6-r34q",{"type":942,"url":1193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1669",{"type":953,"url":1195},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22057",{"type":953,"url":1197},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F8a37f9dadd8e23fa4ee3f537eeb6413e75d12553",{"type":950,"url":986},{"type":953,"url":1200},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.12.1",{"type":953,"url":1202},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.13.2",{"type":950,"url":994},{"type":942,"url":1205},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3m4q-jmj6-r34q",[998],{"id":114,"slug":1208,"dossier":45,"summary":1209,"aliases":1210,"sourceIds":1213,"published":1214,"modified":1215,"checkedAt":7,"severity":1216,"references":1219,"versionKeys":1236,"packageCount":32,"repositoryCount":102},"ghsa-43qf-4rqw-9q2g-2b94f083","Flask-CORS vulnerable to Improper Handling of Case Sensitivity",[1211,1212],"CVE-2024-6866","PYSEC-2026-1383",[114,1212],"2025-03-20T12:32:45Z","2026-07-07T17:57:18.348501785Z",[1217],{"type":938,"score":1218},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1220,1222,1224,1226,1228,1230,1232,1234],{"type":942,"url":1221},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6866",{"type":953,"url":1223},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Feb39516a3c96b90d0ae5f51293972395ec3ef358",{"type":950,"url":1225},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors",{"type":953,"url":1227},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fextension.py#L195",{"type":953,"url":1229},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F808c11af-faee-43a8-824b-b5ab4f62b9e6",{"type":953,"url":1231},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00049.html",{"type":950,"url":1233},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fflask-cors",{"type":942,"url":1235},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-43qf-4rqw-9q2g",[1237,1238],"pypi:flask-cors@4.0.0","pypi:flask-cors@5.0.1",{"id":115,"slug":1240,"dossier":89,"summary":1241,"aliases":1242,"sourceIds":1246,"published":1247,"modified":1248,"checkedAt":7,"severity":1249,"references":1251,"versionKeys":1264,"packageCount":32,"repositoryCount":1095},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1243,1244,1245],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[115,1245],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[1250],{"type":938,"score":1161},[1252,1254,1256,1258,1260,1262],{"type":1140,"url":1253},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":942,"url":1255},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":947,"url":1257},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":953,"url":1259},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":950,"url":1261},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":942,"url":1263},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[1265,1266,1267,1268,1269,1270,1271,1272],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":116,"slug":1274,"dossier":45,"summary":1275,"aliases":1276,"sourceIds":1279,"published":1280,"modified":1281,"checkedAt":7,"severity":1282,"references":1285,"versionKeys":1298,"packageCount":32,"repositoryCount":235},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[1277,1278],"CVE-2025-50182","PYSEC-2026-1997",[116,1278],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[1283],{"type":938,"score":1284},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1286,1288,1290,1292,1293,1295,1296],{"type":953,"url":1287},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":942,"url":1289},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":947,"url":1291},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":950,"url":1084},{"type":953,"url":1294},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":950,"url":1086},{"type":942,"url":1297},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1090,1091,1092,1093],{"id":117,"slug":1300,"dossier":45,"summary":1301,"aliases":1302,"sourceIds":1305,"published":1306,"modified":1307,"checkedAt":7,"severity":1308,"references":1311,"versionKeys":1324,"packageCount":32,"repositoryCount":32},"ghsa-4f3f-g24h-fr8m-024d3bd8","Keras has an untrusted deserialization vulnerability",[1303,1304],"CVE-2026-1462","PYSEC-2026-2547",[117,1304],"2026-04-13T15:31:42Z","2026-07-13T16:42:43.080773198Z",[1309],{"type":938,"score":1310},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1312,1314,1316,1318,1319,1321,1322],{"type":942,"url":1313},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1462",{"type":953,"url":1315},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22035",{"type":953,"url":1317},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Fb6773d3decaef1b05d8e794458e148cb362f163f",{"type":950,"url":986},{"type":953,"url":1320},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F7e78d6f1-6977-4300-b595-e81bdbda331c",{"type":950,"url":994},{"type":942,"url":1323},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4f3f-g24h-fr8m",[998],{"id":118,"slug":1326,"dossier":89,"summary":1327,"aliases":1328,"sourceIds":1332,"published":1333,"modified":1334,"checkedAt":7,"severity":1335,"references":1338,"versionKeys":1353,"packageCount":32,"repositoryCount":1095},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[1329,1330,1331],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[118,1331],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[1336],{"type":938,"score":1337},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[1339,1341,1343,1345,1347,1349,1351,1352],{"type":1140,"url":1340},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":942,"url":1342},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":947,"url":1344},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":947,"url":1346},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":947,"url":1348},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":953,"url":1350},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":950,"url":1261},{"type":942,"url":1263},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":119,"slug":1355,"dossier":89,"summary":1356,"aliases":1357,"sourceIds":1360,"published":1361,"modified":1362,"checkedAt":7,"severity":1363,"references":1368,"versionKeys":1391,"packageCount":32,"repositoryCount":1095},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[1358,1359],"CVE-2026-4539","PYSEC-2026-2987",[119,1359],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[1364,1366],{"type":938,"score":1365},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1010,"score":1367},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1369,1371,1373,1375,1377,1379,1381,1383,1385,1387,1389],{"type":942,"url":1370},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":953,"url":1372},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":953,"url":1374},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":953,"url":1376},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":950,"url":1378},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":953,"url":1380},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":953,"url":1382},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":953,"url":1384},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":953,"url":1386},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":950,"url":1388},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":942,"url":1390},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[1392,1393],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":120,"slug":1395,"dossier":45,"summary":1396,"aliases":1397,"sourceIds":1400,"published":1401,"modified":1402,"checkedAt":7,"severity":1403,"references":1406,"versionKeys":1425,"packageCount":32,"repositoryCount":32},"ghsa-58hv-7753-xmfq-eac7897c","Keras: tar extraction permits symlink-based path traversal",[1398,1399],"CVE-2026-12482","PYSEC-2026-3630",[120,1399],"2026-07-14T06:31:23Z","2026-08-10T11:40:35.541693489Z",[1404],{"type":938,"score":1405},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1407,1409,1411,1413,1415,1417,1418,1419,1420,1422,1423],{"type":942,"url":1408},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12482",{"type":953,"url":1410},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F23015",{"type":953,"url":1412},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F23165",{"type":953,"url":1414},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F9867df45c456dd1077a6243bb56219f66e288150",{"type":953,"url":1416},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Fd338a45204bdc787c8b3c4a9b82c1911cd52dedf",{"type":950,"url":986},{"type":953,"url":988},{"type":953,"url":990},{"type":953,"url":1421},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F5d3638e8-a9f6-4964-a865-ddb9fe4d4b6e",{"type":950,"url":994},{"type":942,"url":1424},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-58hv-7753-xmfq",[998],{"id":121,"slug":1427,"dossier":45,"summary":1428,"aliases":1429,"sourceIds":1432,"published":1433,"modified":1434,"checkedAt":7,"severity":1435,"references":1437,"versionKeys":1454,"packageCount":32,"repositoryCount":32},"ghsa-5gwj-m78q-7pq3-c88cffac","Keras: Lambda deserialization can bypass safe mode and execute code",[1430,1431],"CVE-2026-12481","PYSEC-2026-3631",[121,1431],"2026-07-03T21:31:36Z","2026-08-10T11:40:41.687024935Z",[1436],{"type":938,"score":1310},[1438,1440,1442,1443,1445,1446,1447,1448,1449,1451,1452],{"type":942,"url":1439},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12481",{"type":953,"url":1441},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F23048",{"type":953,"url":1412},{"type":953,"url":1444},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F55888d3becbdbb45dc16a55b489900f911e2dde5",{"type":953,"url":1416},{"type":950,"url":986},{"type":953,"url":988},{"type":953,"url":990},{"type":953,"url":1450},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F59ceaed1-c8a3-4135-8f94-169ade02823d",{"type":950,"url":994},{"type":942,"url":1453},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5gwj-m78q-7pq3",[998],{"id":122,"slug":1456,"dossier":45,"summary":1457,"aliases":1458,"sourceIds":1462,"published":1463,"modified":1464,"checkedAt":7,"severity":1465,"references":1470,"versionKeys":1488,"packageCount":32,"repositoryCount":274},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[1459,1460,1461],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[122,1461],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[1466,1468],{"type":1010,"score":1467},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":938,"score":1469},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1471,1473,1475,1478,1480,1482,1484,1486],{"type":1140,"url":1472},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":942,"url":1474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1476,"url":1477},"REPORT","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":947,"url":1479},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":953,"url":1481},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":950,"url":1483},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":953,"url":1485},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":956,"url":1487},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[1489,1490,1491],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":123,"slug":1493,"dossier":45,"summary":1494,"aliases":1495,"sourceIds":1498,"published":1499,"modified":1500,"checkedAt":7,"severity":1501,"references":1505,"versionKeys":1520,"packageCount":32,"repositoryCount":102},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[1496,1497],"CVE-2025-69534","PYSEC-2026-89",[123,1497],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[1502,1503],{"type":938,"score":1161},{"type":1010,"score":1504},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[1506,1508,1510,1512,1514,1516,1518],{"type":942,"url":1507},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":1476,"url":1509},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":953,"url":1511},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":950,"url":1513},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":953,"url":1515},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":953,"url":1517},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":942,"url":1519},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[1521],"pypi:markdown@3.8",{"id":124,"slug":1523,"dossier":89,"summary":1524,"aliases":1525,"sourceIds":1529,"published":1530,"modified":1531,"checkedAt":7,"severity":1532,"references":1534,"versionKeys":1544,"packageCount":32,"repositoryCount":1095},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[1526,1527,1528],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[124,1528],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[1533],{"type":938,"score":1161},[1535,1537,1539,1540,1542,1543],{"type":1140,"url":1536},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":942,"url":1538},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":947,"url":1257},{"type":953,"url":1541},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":950,"url":1261},{"type":942,"url":1263},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":125,"slug":1546,"dossier":45,"summary":1547,"aliases":1548,"sourceIds":1552,"published":1553,"modified":1554,"checkedAt":7,"severity":1555,"references":1560,"versionKeys":1568,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[1549,1550,1551],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[125,1551],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[1556,1558],{"type":938,"score":1557},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1010,"score":1559},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1561,1563,1565,1566],{"type":942,"url":1562},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":942,"url":1564},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":950,"url":1261},{"type":942,"url":1567},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[1268,1269,1270,1271,1272],{"id":126,"slug":1570,"dossier":89,"summary":1571,"aliases":1572,"sourceIds":1576,"published":1577,"modified":1578,"checkedAt":7,"severity":1579,"references":1582,"versionKeys":1598,"packageCount":32,"repositoryCount":1095},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[1573,1574,1575],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[126,1575],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[1580],{"type":1010,"score":1581},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1583,1585,1587,1589,1591,1592,1594,1596],{"type":953,"url":1584},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":942,"url":1586},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":953,"url":1588},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":953,"url":1590},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":950,"url":1261},{"type":953,"url":1593},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":950,"url":1595},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":942,"url":1597},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":127,"slug":1600,"dossier":89,"summary":1601,"aliases":1602,"sourceIds":1605,"published":1606,"modified":1607,"checkedAt":7,"severity":1608,"references":1612,"versionKeys":1621,"packageCount":32,"repositoryCount":1625},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[1603,1604],"CVE-2026-45409","PYSEC-2026-215",[127,1604],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[1609,1610],{"type":938,"score":1013},{"type":1010,"score":1611},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[1613,1615,1617,1619],{"type":942,"url":1614},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":942,"url":1616},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":950,"url":1618},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":953,"url":1620},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[1622,1623,1624],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":128,"slug":1627,"dossier":45,"summary":1628,"aliases":1629,"sourceIds":1632,"published":1633,"modified":1634,"checkedAt":7,"severity":1635,"references":1640,"versionKeys":1651,"packageCount":32,"repositoryCount":64},"ghsa-68rp-wp8r-4726-c59718b4","Flask session does not add `Vary: Cookie` header when accessed in some ways",[1630,1631],"CVE-2026-27205","PYSEC-2026-2151",[128,1631],"2026-02-19T20:45:41Z","2026-07-13T07:26:21.445447696Z",[1636,1638],{"type":1010,"score":1637},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":938,"score":1639},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1641,1643,1645,1647,1649],{"type":942,"url":1642},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fsecurity\u002Fadvisories\u002FGHSA-68rp-wp8r-4726",{"type":942,"url":1644},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-27205",{"type":947,"url":1646},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Fcommit\u002F089cb86dd22bff589a4eafb7ab8e42dc357623b4",{"type":950,"url":1648},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask",{"type":942,"url":1650},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fflask\u002Freleases\u002Ftag\u002F3.1.3",[1652,1653,1654,1655],"pypi:flask@3.0.2","pypi:flask@3.0.3","pypi:flask@3.1.1","pypi:flask@3.1.2",{"id":129,"slug":1657,"dossier":89,"summary":1658,"aliases":1659,"sourceIds":1663,"published":1664,"modified":1665,"checkedAt":7,"severity":1666,"references":1668,"versionKeys":1681,"packageCount":32,"repositoryCount":1095},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[1660,1661,1662],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[129,1662],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[1667],{"type":938,"score":1161},[1669,1671,1673,1675,1677,1679,1680],{"type":1140,"url":1670},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":942,"url":1672},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":947,"url":1674},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":947,"url":1676},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":953,"url":1678},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":950,"url":1261},{"type":942,"url":1593},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":130,"slug":1683,"dossier":45,"summary":1684,"aliases":1685,"sourceIds":1688,"published":1689,"modified":1690,"checkedAt":7,"severity":1691,"references":1694,"versionKeys":1707,"packageCount":32,"repositoryCount":64},"ghsa-768j-98cg-p3fv-0815ff07","fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib",[1686,1687],"CVE-2025-66034","PYSEC-2026-1389",[130,1687],"2025-12-01T19:07:00Z","2026-07-07T17:57:24.966058048Z",[1692],{"type":938,"score":1693},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:N\u002FI:H\u002FA:L",[1695,1697,1699,1701,1703,1705],{"type":953,"url":1696},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fsecurity\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",{"type":942,"url":1698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66034",{"type":953,"url":1700},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools\u002Fcommit\u002Fa696d5ba93270d5954f98e7cab5ddca8a02c1e32",{"type":950,"url":1702},"https:\u002F\u002Fgithub.com\u002Ffonttools\u002Ffonttools",{"type":950,"url":1704},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffonttools",{"type":942,"url":1706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-768j-98cg-p3fv",[1708,1709,1710,1711,1712],"pypi:fonttools@4.55.3","pypi:fonttools@4.57.0","pypi:fonttools@4.58.0","pypi:fonttools@4.58.5","pypi:fonttools@4.59.2",{"id":131,"slug":1714,"dossier":45,"summary":1715,"aliases":1716,"sourceIds":1719,"published":1720,"modified":1721,"checkedAt":7,"severity":1722,"references":1725,"versionKeys":1742,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[1717,1718],"CVE-2026-0994","PYSEC-2026-1805",[131,1718],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[1723],{"type":1010,"score":1724},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[1726,1728,1730,1732,1734,1736,1738,1740],{"type":942,"url":1727},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":953,"url":1729},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":953,"url":1731},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":953,"url":1733},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":953,"url":1735},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":950,"url":1737},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":950,"url":1739},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":942,"url":1741},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[1743,1744,1745,1746,1747,1748,1749,1750,1751],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":132,"slug":1753,"dossier":45,"summary":1754,"aliases":1755,"sourceIds":1758,"published":1214,"modified":1759,"checkedAt":7,"severity":1760,"references":1763,"versionKeys":1777,"packageCount":32,"repositoryCount":102},"ghsa-7rxf-gvfg-47g4-171801e8","Flask-CORS improper regex path matching vulnerability",[1756,1757],"CVE-2024-6839","PYSEC-2026-1384",[132,1757],"2026-07-07T17:57:28.129199523Z",[1761],{"type":938,"score":1762},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1764,1766,1768,1769,1771,1773,1774,1775],{"type":942,"url":1765},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6839",{"type":953,"url":1767},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fe970988bea563e05e8b8f53fa7bcc134b5bf5c5f",{"type":950,"url":1225},{"type":953,"url":1770},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F4.0.1\u002Fflask_cors\u002Fcore.py#L73",{"type":953,"url":1772},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F403eb1fc-86f4-4820-8eba-0f3dfae9f2b4",{"type":953,"url":1231},{"type":950,"url":1233},{"type":942,"url":1776},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7rxf-gvfg-47g4",[1237,1238],{"id":133,"slug":1779,"dossier":45,"summary":1780,"aliases":1781,"sourceIds":1784,"published":1785,"modified":1786,"checkedAt":7,"severity":1787,"references":1792,"versionKeys":1805,"packageCount":32,"repositoryCount":32},"ghsa-84pr-m4jr-85g5-4a9795ee","flask-cors vulnerable to log injection when the log level is set to debug",[1782,1783],"CVE-2024-1681","PYSEC-2024-271",[133,1783],"2024-04-19T20:15:09.273Z","2026-06-10T17:01:16.365143709Z",[1788,1790],{"type":938,"score":1789},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":938,"score":1791},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1793,1795,1796,1798,1800,1802,1803],{"type":942,"url":1794},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-1681",{"type":950,"url":1225},{"type":953,"url":1797},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002F40acc8092332dfed4bb54d7a4f89a6d479466de7\u002Fflask_cors\u002Fextension.py#L194",{"type":953,"url":1799},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-271.yaml",{"type":1140,"url":1801},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25a7a0ba-9fa2-4777-acb6-03e5539bb644",{"type":953,"url":1231},{"type":942,"url":1804},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-84pr-m4jr-85g5",[1237],{"id":134,"slug":1807,"dossier":45,"summary":1808,"aliases":1809,"sourceIds":1812,"published":1813,"modified":1814,"checkedAt":7,"severity":1815,"references":1818,"versionKeys":1829,"packageCount":32,"repositoryCount":255},"ghsa-87hc-h4r5-73f7-c5117ca2","Werkzeug safe_join() allows Windows special device names with compound extensions",[1810,1811],"CVE-2026-21860","PYSEC-2026-2044",[134,1811],"2026-01-08T19:51:21Z","2026-07-07T17:56:19.044748151Z",[1816,1817],{"type":938,"score":1013},{"type":1010,"score":1011},[1819,1821,1823,1825,1826,1827],{"type":953,"url":1820},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",{"type":942,"url":1822},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21860",{"type":953,"url":1824},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F7ae1d254e04a0c33e241ac1cca4783ce6c875ca3",{"type":950,"url":1022},{"type":950,"url":1060},{"type":942,"url":1828},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-87hc-h4r5-73f7",[1026,1027,1028,1029],{"id":135,"slug":1831,"dossier":45,"summary":1832,"aliases":1833,"sourceIds":1836,"published":1837,"modified":1838,"checkedAt":7,"severity":1839,"references":1842,"versionKeys":1861,"packageCount":32,"repositoryCount":274},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[1834,1835],"CVE-2025-4565","PYSEC-2026-1806",[135,1835],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[1840],{"type":1010,"score":1841},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[1843,1845,1847,1849,1851,1852,1854,1856,1858,1859],{"type":953,"url":1844},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":953,"url":1846},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":942,"url":1848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":953,"url":1850},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":950,"url":1737},{"type":953,"url":1853},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":953,"url":1855},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":953,"url":1857},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":950,"url":1739},{"type":942,"url":1860},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[1743,1745,1746],{"id":136,"slug":1863,"dossier":45,"summary":1864,"aliases":1865,"sourceIds":1868,"published":1869,"modified":1870,"checkedAt":7,"severity":1871,"references":1874,"versionKeys":1892,"packageCount":32,"repositoryCount":102},"ghsa-8rrh-rw8j-w5fx-eadd80fb","Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack",[1866,1867],"CVE-2026-24049","PYSEC-2026-2047",[136,1867],"2026-01-22T18:02:56Z","2026-07-07T17:56:06.063831091Z",[1872],{"type":938,"score":1873},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[1875,1877,1879,1881,1884,1886,1888,1890],{"type":953,"url":1876},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fsecurity\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",{"type":942,"url":1878},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-24049",{"type":947,"url":1880},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F7a7d2de96b22a9adf9208afcc9547e1001569fef",{"type":1882,"url":1883},"INTRODUCED","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Fcommit\u002F934fe177ff912c8e03d5ae951d3805e1fd90ba5e",{"type":950,"url":1885},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel",{"type":953,"url":1887},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fwheel\u002Freleases\u002Ftag\u002F0.46.2",{"type":950,"url":1889},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fwheel",{"type":942,"url":1891},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8rrh-rw8j-w5fx",[1893,1894],"pypi:wheel@0.43.0","pypi:wheel@0.45.1",{"id":137,"slug":1896,"dossier":89,"summary":1897,"aliases":1898,"sourceIds":1902,"published":1903,"modified":1904,"checkedAt":7,"severity":1905,"references":1907,"versionKeys":1917,"packageCount":32,"repositoryCount":1095},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[1899,1900,1901],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[137,1901],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[1906],{"type":938,"score":1161},[1908,1910,1912,1913,1915,1916],{"type":1140,"url":1909},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":942,"url":1911},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":947,"url":1257},{"type":953,"url":1914},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":950,"url":1261},{"type":942,"url":1263},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":138,"slug":1919,"dossier":45,"summary":1920,"aliases":1921,"sourceIds":1924,"published":1214,"modified":1925,"checkedAt":7,"severity":1926,"references":1929,"versionKeys":1943,"packageCount":32,"repositoryCount":102},"ghsa-8vgw-p6qm-5gr7-be25d449","Flask-CORS allows for inconsistent CORS matching",[1922,1923],"CVE-2024-6844","PYSEC-2026-1385",[138,1923],"2026-07-07T17:57:07.966932476Z",[1927],{"type":938,"score":1928},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1930,1932,1934,1935,1937,1939,1940,1941],{"type":942,"url":1931},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6844",{"type":953,"url":1933},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F35d875319621bd129a38b2b823abf4a2f6cda536",{"type":950,"url":1225},{"type":953,"url":1936},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fblob\u002Fmain\u002Fflask_cors\u002Fextension.py#L193",{"type":953,"url":1938},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F731a6cd4-d05f-4fe6-8f5b-fe088d7b34e0",{"type":953,"url":1231},{"type":950,"url":1233},{"type":942,"url":1942},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8vgw-p6qm-5gr7",[1237,1238],{"id":139,"slug":1945,"dossier":45,"summary":1946,"aliases":1947,"sourceIds":1950,"published":1951,"modified":1952,"checkedAt":7,"severity":1953,"references":1956,"versionKeys":1975,"packageCount":32,"repositoryCount":235},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[1948,1949],"CVE-2024-47081","PYSEC-2026-1872",[139,1949],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[1954],{"type":938,"score":1955},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[1957,1959,1961,1963,1965,1967,1969,1971,1973],{"type":953,"url":1958},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":942,"url":1960},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":953,"url":1962},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":947,"url":1964},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":950,"url":1966},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":953,"url":1968},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":953,"url":1970},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":950,"url":1972},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":942,"url":1974},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[1976,1977],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":140,"slug":1979,"dossier":89,"summary":1980,"aliases":1981,"sourceIds":1985,"published":1986,"modified":1987,"checkedAt":7,"severity":1988,"references":1990,"versionKeys":2003,"packageCount":32,"repositoryCount":1095},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[1982,1983,1984],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[140,1984],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[1989],{"type":938,"score":1161},[1991,1993,1995,1997,1999,2001,2002],{"type":1140,"url":1992},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":942,"url":1994},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":947,"url":1996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":947,"url":1998},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":953,"url":2000},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":950,"url":1261},{"type":942,"url":1593},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":141,"slug":2005,"dossier":45,"summary":2006,"aliases":2007,"sourceIds":2010,"published":2011,"modified":2012,"checkedAt":7,"severity":2013,"references":2016,"versionKeys":2033,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[2008,2009],"CVE-2024-35195","PYSEC-2026-1873",[141,2009],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[2014],{"type":938,"score":2015},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2017,2019,2021,2023,2025,2026,2028,2030,2031],{"type":953,"url":2018},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":942,"url":2020},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":953,"url":2022},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":947,"url":2024},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":950,"url":1966},{"type":953,"url":2027},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":953,"url":2029},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":950,"url":1972},{"type":942,"url":2032},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[1976],{"id":142,"slug":2035,"dossier":45,"summary":2036,"aliases":2037,"sourceIds":2040,"published":2041,"modified":2042,"checkedAt":7,"severity":2043,"references":2046,"versionKeys":2058,"packageCount":32,"repositoryCount":32},"ghsa-c9rc-mg46-23w3-3ac3227d","Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality",[2038,2039],"CVE-2025-8747","PYSEC-2025-75",[142],"2025-08-12T19:33:07Z","2026-05-29T21:00:16.208455145Z",[2044],{"type":938,"score":2045},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2047,2049,2051,2052,2053,2054,2056],{"type":953,"url":2048},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-c9rc-mg46-23w3",{"type":942,"url":2050},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-8747",{"type":953,"url":1114},{"type":953,"url":1116},{"type":950,"url":986},{"type":953,"url":2055},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2025-75.yaml",{"type":953,"url":2057},"https:\u002F\u002Fjfrog.com\u002Fblog\u002Fkeras-safe_mode-bypass-vulnerability",[998],{"id":143,"slug":2060,"dossier":45,"summary":2061,"aliases":2062,"sourceIds":2066,"published":2067,"modified":2068,"checkedAt":7,"severity":2069,"references":2073,"versionKeys":2113,"packageCount":32,"repositoryCount":2114},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[2063,2064,2065],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[143,2065],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[2070,2072],{"type":1010,"score":2071},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":938,"score":1161},[2074,2076,2078,2080,2082,2084,2085,2087,2089,2091,2093,2095,2097,2099,2101,2103,2105,2107,2109,2111],{"type":953,"url":2075},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":942,"url":2077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":953,"url":2079},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":953,"url":2081},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":953,"url":2083},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":950,"url":1261},{"type":953,"url":2086},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":953,"url":2088},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":953,"url":2090},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":942,"url":2092},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":942,"url":2094},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":942,"url":2096},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":942,"url":2098},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":942,"url":2100},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":942,"url":2102},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":942,"url":2104},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":942,"url":2106},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":942,"url":2108},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":942,"url":2110},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":942,"url":2112},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[1265,1266,1267,1268,1269,1270,1271],12,{"id":144,"slug":2116,"dossier":45,"summary":2117,"aliases":2118,"sourceIds":2121,"published":2122,"modified":2123,"checkedAt":7,"severity":2124,"references":2127,"versionKeys":2144,"packageCount":32,"repositoryCount":102},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[2119,2120],"CVE-2025-27516","PYSEC-2026-1471",[144,2120],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[2125],{"type":1010,"score":2126},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2128,2130,2132,2134,2136,2138,2140,2142],{"type":953,"url":2129},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":942,"url":2131},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":947,"url":2133},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":950,"url":2135},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":953,"url":2137},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":953,"url":2139},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":950,"url":2141},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":942,"url":2143},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[2145,2146],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":145,"slug":2148,"dossier":45,"summary":2149,"aliases":2150,"sourceIds":2154,"published":2155,"modified":2156,"checkedAt":7,"severity":2157,"references":2161,"versionKeys":2177,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[2151,2152,2153],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[145,2153],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[2158,2159],{"type":938,"score":2045},{"type":1010,"score":2160},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2162,2164,2166,2168,2169,2171,2173,2175],{"type":942,"url":2163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":953,"url":2165},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":953,"url":2167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":950,"url":1483},{"type":953,"url":2170},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":953,"url":2172},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":950,"url":2174},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":942,"url":2176},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[1489],{"id":146,"slug":2179,"dossier":45,"summary":2180,"aliases":2181,"sourceIds":2184,"published":2185,"modified":2186,"checkedAt":7,"severity":2187,"references":2190,"versionKeys":2205,"packageCount":32,"repositoryCount":32},"ghsa-f9vj-2wh5-fj8j-f0f29e2a","Werkzeug safe_join not safe on Windows",[2182,2183],"CVE-2024-49766","PYSEC-2026-2045",[146,2183],"2024-10-25T19:43:41Z","2026-07-07T17:56:25.762524663Z",[2188],{"type":1010,"score":2189},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2191,2193,2195,2197,2198,2200,2202,2203],{"type":953,"url":2192},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",{"type":942,"url":2194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49766",{"type":947,"url":2196},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F2767bcb10a7dd1c297d812cc5e6d11a474c1f092",{"type":950,"url":1022},{"type":953,"url":2199},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.0.6",{"type":953,"url":2201},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250131-0005",{"type":950,"url":1060},{"type":942,"url":2204},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f9vj-2wh5-fj8j",[1026],{"id":147,"slug":2207,"dossier":89,"summary":2208,"aliases":2209,"sourceIds":2213,"published":2214,"modified":2215,"checkedAt":7,"severity":2216,"references":2219,"versionKeys":2233,"packageCount":32,"repositoryCount":1095},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[2210,2211,2212],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[147,2212],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[2217],{"type":938,"score":2218},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[2220,2222,2224,2226,2228,2229,2230,2231],{"type":953,"url":2221},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":942,"url":2223},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":953,"url":2225},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":953,"url":2227},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":950,"url":1261},{"type":953,"url":1593},{"type":950,"url":1595},{"type":942,"url":2232},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":148,"slug":2235,"dossier":89,"summary":2236,"aliases":2237,"sourceIds":2240,"published":2241,"modified":2242,"checkedAt":7,"severity":2243,"references":2248,"versionKeys":2258,"packageCount":32,"repositoryCount":225},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[2238,2239],"CVE-2026-25645","PYSEC-2026-2275",[148,2239],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[2244,2246],{"type":938,"score":2245},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":938,"score":2247},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[2249,2251,2253,2255,2256],{"type":942,"url":2250},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":942,"url":2252},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":947,"url":2254},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":950,"url":1966},{"type":942,"url":2257},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[1976,1977,2259,2260],"pypi:requests@2.32.4","pypi:requests@2.32.5",{"id":149,"slug":2262,"dossier":45,"summary":2263,"aliases":2264,"sourceIds":2267,"published":2268,"modified":2269,"checkedAt":7,"severity":2270,"references":2273,"versionKeys":2288,"packageCount":32,"repositoryCount":32},"ghsa-gh82-f9x8-5frx-99a23b20","Keras: DiskIOStore permits path traversal through crafted layer names",[2265,2266],"CVE-2026-12479","PYSEC-2026-3632",[149,2266],"2026-06-22T18:34:13Z","2026-08-10T11:40:43.029343141Z",[2271],{"type":938,"score":2272},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:L",[2274,2276,2278,2280,2281,2282,2283,2285,2286],{"type":942,"url":2275},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12479",{"type":953,"url":2277},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F23017",{"type":953,"url":2279},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Fd8caeb58cc9e61ea092445dc7a20908ca8d693e2",{"type":950,"url":986},{"type":953,"url":988},{"type":953,"url":990},{"type":953,"url":2284},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F188836b9-12fc-49c7-8dbf-04f60fe33743",{"type":950,"url":994},{"type":942,"url":2287},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gh82-f9x8-5frx",[998],{"id":150,"slug":2290,"dossier":89,"summary":2291,"aliases":2292,"sourceIds":2295,"published":2296,"modified":2297,"checkedAt":7,"severity":2298,"references":2300,"versionKeys":2311,"packageCount":32,"repositoryCount":1095},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[2293,2294],"CVE-2025-66418","PYSEC-2026-1998",[150,2294],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[2299],{"type":1010,"score":1075},[2301,2303,2305,2307,2308,2309],{"type":953,"url":2302},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":942,"url":2304},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":947,"url":2306},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":950,"url":1084},{"type":950,"url":1086},{"type":942,"url":2310},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1090,1091,1092,1093,1094],{"id":151,"slug":2313,"dossier":45,"summary":2314,"aliases":2315,"sourceIds":2318,"published":2319,"modified":2320,"checkedAt":7,"severity":2321,"references":2324,"versionKeys":2339,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[2316,2317],"CVE-2024-56201","PYSEC-2026-1472",[151,2317],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[2322,2323],{"type":938,"score":1469},{"type":1010,"score":2126},[2325,2327,2329,2331,2333,2334,2336,2337],{"type":953,"url":2326},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":942,"url":2328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":953,"url":2330},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":947,"url":2332},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":950,"url":2135},{"type":953,"url":2335},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":950,"url":2141},{"type":942,"url":2338},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[2145],{"id":152,"slug":2341,"dossier":89,"summary":2342,"aliases":2343,"sourceIds":2347,"published":2348,"modified":2349,"checkedAt":7,"severity":2350,"references":2353,"versionKeys":2365,"packageCount":32,"repositoryCount":2373},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[2344,2345,2346],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[152,2346],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[2351],{"type":938,"score":2352},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[2354,2356,2358,2360,2362,2363],{"type":1140,"url":2355},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":942,"url":2357},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":947,"url":2359},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":953,"url":2361},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":950,"url":1483},{"type":942,"url":2364},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[1489,1490,1491,2366,2367,2368,2369,2370,2371,2372],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":153,"slug":2375,"dossier":45,"summary":2376,"aliases":2377,"sourceIds":2380,"published":2381,"modified":2382,"checkedAt":7,"severity":2383,"references":2386,"versionKeys":2407,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[2378,2379],"CVE-2024-34064","PYSEC-2026-1474",[153,2379],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[2384],{"type":938,"score":2385},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[2387,2389,2391,2393,2394,2396,2398,2400,2402,2404,2405],{"type":953,"url":2388},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":942,"url":2390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":947,"url":2392},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":950,"url":2135},{"type":953,"url":2395},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":953,"url":2397},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":953,"url":2399},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":953,"url":2401},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":953,"url":2403},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":950,"url":2141},{"type":942,"url":2406},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[2145],{"id":154,"slug":2409,"dossier":45,"summary":1001,"aliases":2410,"sourceIds":2413,"published":2414,"modified":2415,"checkedAt":7,"severity":2416,"references":2418,"versionKeys":2431,"packageCount":32,"repositoryCount":255},"ghsa-hgf8-39gv-g3f2-0469b394",[2411,2412],"CVE-2025-66221","PYSEC-2026-2046",[154,2412],"2025-12-02T00:27:38Z","2026-07-07T17:57:36.044527736Z",[2417],{"type":1010,"score":1011},[2419,2421,2423,2425,2426,2428,2429],{"type":953,"url":2420},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",{"type":942,"url":2422},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66221",{"type":953,"url":2424},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F4b833376a45c323a189cd11d2362bcffdb1c0c13",{"type":950,"url":1022},{"type":953,"url":2427},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Freleases\u002Ftag\u002F3.1.4",{"type":950,"url":1060},{"type":942,"url":2430},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hgf8-39gv-g3f2",[1026,1027,1028,1029],{"id":155,"slug":2433,"dossier":45,"summary":2434,"aliases":2435,"sourceIds":2438,"published":2439,"modified":2440,"checkedAt":7,"severity":2441,"references":2446,"versionKeys":2463,"packageCount":32,"repositoryCount":32},"ghsa-hjqc-jx6g-rwp9-e1daa1c5","Keras Directory Traversal Vulnerability",[2436,2437],"CVE-2025-12060","PYSEC-2026-1486",[155,2437],"2025-12-02T00:58:33Z","2026-07-07T17:57:31.462260108Z",[2442,2444],{"type":938,"score":2443},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1010,"score":2445},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[2447,2449,2451,2453,2455,2457,2458,2460,2461],{"type":953,"url":2448},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-hjqc-jx6g-rwp9",{"type":942,"url":2450},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12060",{"type":942,"url":2452},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12638",{"type":953,"url":2454},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21760",{"type":953,"url":2456},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F47fcb397ee4caffd5a75efd1fa3067559594e951",{"type":950,"url":986},{"type":953,"url":2459},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff94f5beb-54d8-4e6a-8bac-86d9aee103f4",{"type":950,"url":994},{"type":942,"url":2462},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hjqc-jx6g-rwp9",[998],{"id":156,"slug":2465,"dossier":45,"summary":2466,"aliases":2467,"sourceIds":2470,"published":2471,"modified":2472,"checkedAt":7,"severity":2473,"references":2478,"versionKeys":2502,"packageCount":32,"repositoryCount":32},"ghsa-hqp4-2352-xf5r-3c03fdfb","Keras archive extraction utilities allow path traversal and arbitrary file writes",[2468,2469],"CVE-2026-11816","PYSEC-2026-2324",[156,2469],"2026-06-11T14:16:26.557Z","2026-08-10T11:01:44.730654Z",[2474,2476],{"type":938,"score":2475},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"type":938,"score":2477},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[2479,2481,2483,2485,2487,2489,2491,2492,2494,2496,2498,2500],{"type":942,"url":2480},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-11816",{"type":953,"url":2482},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22194",{"type":947,"url":2484},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F2465b6657b02c8eed308759b7e800e295ae01888",{"type":953,"url":2486},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":942,"url":2488},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-11816",{"type":942,"url":2490},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2487912",{"type":950,"url":986},{"type":953,"url":2493},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Freleases\u002Ftag\u002Fv3.14.0",{"type":953,"url":2495},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2026-2324.yaml",{"type":1140,"url":2497},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa07e3983-7158-4419-af2b-38f1dea01a4f",{"type":942,"url":2499},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-11816.json",{"type":942,"url":2501},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hqp4-2352-xf5r",[998],{"id":157,"slug":2504,"dossier":45,"summary":2505,"aliases":2506,"sourceIds":2509,"published":2510,"modified":2511,"checkedAt":7,"severity":2512,"references":2517,"versionKeys":2543,"packageCount":32,"repositoryCount":32},"ghsa-hxwh-jpp2-84pm-85ca3470","Flask-CORS allows the `Access-Control-Allow-Private-Network` CORS header to be set to true by default",[2507,2508],"CVE-2024-6221","PYSEC-2024-71",[157,2508],"2024-08-18T19:15:00Z","2026-07-09T16:56:25.795378335Z",[2513,2515],{"type":938,"score":2514},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":1010,"score":2516},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2518,2520,2522,2524,2526,2528,2530,2532,2533,2535,2537,2539,2541],{"type":942,"url":2519},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6221",{"type":953,"url":2521},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fissues\u002F362",{"type":953,"url":2523},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F363",{"type":953,"url":2525},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fpull\u002F368",{"type":953,"url":2527},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F03aa3f8e2256437f7bad96422a747b98ab5e31bf",{"type":953,"url":2529},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002F7ae310c56ac30e0b94fb42129aa377bf633256ec",{"type":953,"url":2531},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Fcommit\u002Fc8514760cf03fcce16d77f6db7007aad429c4548",{"type":950,"url":1225},{"type":953,"url":2534},"https:\u002F\u002Fgithub.com\u002Fcorydolphin\u002Fflask-cors\u002Freleases",{"type":953,"url":2536},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-260.yaml",{"type":953,"url":2538},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fflask-cors\u002FPYSEC-2024-71.yaml",{"type":953,"url":2540},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fa42935fc-6f57-4818-bca4-3d528235df4d",{"type":942,"url":2542},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxwh-jpp2-84pm",[1237],{"id":158,"slug":2545,"dossier":89,"summary":2546,"aliases":2547,"sourceIds":2551,"published":2552,"modified":2553,"checkedAt":7,"severity":2554,"references":2556,"versionKeys":2570,"packageCount":32,"repositoryCount":1095},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[2548,2549,2550],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[158,2550],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[2555],{"type":938,"score":1161},[2557,2559,2561,2563,2565,2566,2567,2568],{"type":953,"url":2558},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":942,"url":2560},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":953,"url":2562},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":953,"url":2564},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":950,"url":1261},{"type":953,"url":1593},{"type":950,"url":1595},{"type":942,"url":2569},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":159,"slug":2572,"dossier":45,"summary":2573,"aliases":2574,"sourceIds":2577,"published":2578,"modified":2579,"checkedAt":7,"severity":2580,"references":2583,"versionKeys":2600,"packageCount":32,"repositoryCount":32},"ghsa-m8wh-29wm-52mv-d585a226","Keras: HDF5 links can disclose local file contents",[2575,2576],"CVE-2026-9335","PYSEC-2026-3633",[159,2576],"2026-08-02T06:30:20Z","2026-08-10T11:40:47.503642575Z",[2581],{"type":938,"score":2582},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2584,2586,2588,2589,2591,2592,2593,2594,2595,2597,2598],{"type":942,"url":2585},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-9335",{"type":953,"url":2587},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22899",{"type":953,"url":1412},{"type":953,"url":2590},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F23370f16b0ab9a200f7550a34e54a3ceab74ba0e",{"type":953,"url":1416},{"type":950,"url":986},{"type":953,"url":988},{"type":953,"url":990},{"type":953,"url":2596},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F876a7226-5428-4a66-9d05-232461120db5",{"type":950,"url":994},{"type":942,"url":2599},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-m8wh-29wm-52mv",[998],{"id":160,"slug":2602,"dossier":45,"summary":2603,"aliases":2604,"sourceIds":2607,"published":2608,"modified":2609,"checkedAt":7,"severity":2610,"references":2613,"versionKeys":2621,"packageCount":32,"repositoryCount":274},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[2605,2606],"CVE-2026-44432","PYSEC-2026-142",[160,2606],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[2611,2612],{"type":938,"score":1161},{"type":1010,"score":1075},[2614,2616,2618,2620],{"type":942,"url":2615},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":942,"url":2617},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":953,"url":2619},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":950,"url":1084},[2622],"pypi:urllib3@2.6.3",{"id":161,"slug":2624,"dossier":45,"summary":2625,"aliases":2626,"sourceIds":2629,"published":2630,"modified":2631,"checkedAt":7,"severity":2632,"references":2635,"versionKeys":2648,"packageCount":32,"repositoryCount":103},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[2627,2628],"CVE-2026-28684","PYSEC-2026-2270",[161,2628],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[2633],{"type":938,"score":2634},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2636,2638,2640,2642,2644,2646],{"type":947,"url":2637},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":942,"url":2639},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":947,"url":2641},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":953,"url":2643},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":950,"url":2645},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":942,"url":2647},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[2649,2650,2651,2652],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":162,"slug":2654,"dossier":45,"summary":2655,"aliases":2656,"sourceIds":2659,"published":2660,"modified":2661,"checkedAt":7,"severity":2662,"references":2666,"versionKeys":2684,"packageCount":32,"repositoryCount":32},"ghsa-mgx6-5cf9-rr43-cc61e0fb","Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation in KerasFileEditor)",[2657,2658],"CVE-2026-0897","PYSEC-2026-73",[162,2658],"2026-01-15T14:16:26.890Z","2026-06-26T18:00:04.991061489Z",[2663,2665],{"type":1010,"score":2664},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":938,"score":1161},[2667,2669,2671,2673,2675,2677,2679,2680,2682],{"type":953,"url":2668},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-mgx6-5cf9-rr43",{"type":942,"url":2670},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0897",{"type":947,"url":2672},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21880",{"type":953,"url":2674},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F22081",{"type":953,"url":2676},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F7360d4f0d764fbb1fa9c6408fe53da41974dd4f6",{"type":953,"url":2678},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002Ff704c887bf459b42769bfc8a9182f838009afddb",{"type":950,"url":986},{"type":953,"url":2681},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fkeras\u002FPYSEC-2026-73.yaml",{"type":942,"url":2683},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mgx6-5cf9-rr43",[998],{"id":163,"slug":2686,"dossier":45,"summary":2687,"aliases":2688,"sourceIds":2692,"published":2693,"modified":2694,"checkedAt":7,"severity":2695,"references":2698,"versionKeys":2713,"packageCount":32,"repositoryCount":32},"ghsa-mq84-hjqx-cwf2-572417f9","Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery",[2689,2690,2691],"CVE-2025-12058","GHSA-qg93-c7p6-gg7f","PYSEC-2026-1487",[163,2691],"2025-10-29T09:30:22Z","2026-07-07T17:57:32.006640385Z",[2696],{"type":1010,"score":2697},"CVSS:4.0\u002FAV:A\u002FAC:H\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:L\u002FVA:L\u002FSC:H\u002FSI:L\u002FSA:L\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2699,2701,2703,2705,2707,2708,2710,2711],{"type":953,"url":2700},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fsecurity\u002Fadvisories\u002FGHSA-qg93-c7p6-gg7f",{"type":942,"url":2702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-12058",{"type":953,"url":2704},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fpull\u002F21751",{"type":953,"url":2706},"https:\u002F\u002Fgithub.com\u002Fkeras-team\u002Fkeras\u002Fcommit\u002F61ac8c1e51862c471dee7b49029c356f55531487",{"type":950,"url":986},{"type":953,"url":2709},"https:\u002F\u002Fwww.cve.org\u002FCVERecord?id=CVE-2025-12058",{"type":950,"url":994},{"type":942,"url":2712},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq84-hjqx-cwf2",[998],{"id":164,"slug":2715,"dossier":45,"summary":2716,"aliases":2717,"sourceIds":2721,"published":2722,"modified":2723,"checkedAt":7,"severity":2724,"references":2727,"versionKeys":2740,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[2718,2719,2720],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[164,2720],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[2725,2726],{"type":938,"score":1013},{"type":938,"score":1161},[2728,2730,2732,2734,2736,2738,2739],{"type":1140,"url":2729},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":942,"url":2731},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":947,"url":2733},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":947,"url":2735},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":953,"url":2737},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":950,"url":1261},{"type":942,"url":1593},[1270,1271,1272],{"id":165,"slug":2742,"dossier":89,"summary":2743,"aliases":2744,"sourceIds":2748,"published":2749,"modified":2750,"checkedAt":7,"severity":2751,"references":2753,"versionKeys":2764,"packageCount":32,"repositoryCount":1095},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[2745,2746,2747],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[165,2747],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[2752],{"type":938,"score":1161},[2754,2756,2758,2760,2762,2763],{"type":1140,"url":2755},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":942,"url":2757},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":947,"url":2759},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":953,"url":2761},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":950,"url":1261},{"type":942,"url":1263},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":166,"slug":2766,"dossier":45,"summary":2767,"aliases":2768,"sourceIds":2771,"published":2772,"modified":2773,"checkedAt":7,"severity":2774,"references":2776,"versionKeys":2788,"packageCount":32,"repositoryCount":235},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[2769,2770],"CVE-2025-50181","PYSEC-2026-1999",[166,2770],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[2775],{"type":938,"score":1284},[2777,2779,2781,2783,2784,2785,2786],{"type":953,"url":2778},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":942,"url":2780},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":947,"url":2782},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":950,"url":1084},{"type":953,"url":1294},{"type":950,"url":1086},{"type":942,"url":2787},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1090,1091,1092,1093],{"id":167,"slug":2790,"dossier":89,"summary":2791,"aliases":2792,"sourceIds":2796,"published":2797,"modified":2798,"checkedAt":7,"severity":2799,"references":2803,"versionKeys":2815,"packageCount":32,"repositoryCount":1095},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[2793,2794,2795],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[167,2795],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[2800,2801],{"type":1010,"score":2071},{"type":938,"score":2802},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2804,2805,2807,2809,2811,2813,2814],{"type":953,"url":2075},{"type":947,"url":2806},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":942,"url":2808},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":947,"url":2810},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":947,"url":2812},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":950,"url":1261},{"type":942,"url":1567},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":168,"slug":2817,"dossier":45,"summary":2818,"aliases":2819,"sourceIds":2822,"published":2823,"modified":2824,"checkedAt":7,"severity":2825,"references":2829,"versionKeys":2842,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[2820,2821],"CVE-2024-56326","PYSEC-2026-1475",[168,2821],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[2826,2828],{"type":938,"score":2827},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1010,"score":2126},[2830,2832,2834,2836,2837,2838,2839,2840],{"type":953,"url":2831},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":942,"url":2833},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":947,"url":2835},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":950,"url":2135},{"type":953,"url":2335},{"type":953,"url":2137},{"type":950,"url":2141},{"type":942,"url":2841},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[2145],{"id":169,"slug":2844,"dossier":45,"summary":2845,"aliases":2846,"sourceIds":2850,"published":2851,"modified":2852,"checkedAt":7,"severity":2853,"references":2856,"versionKeys":2876,"packageCount":32,"repositoryCount":32},"ghsa-q34m-jh98-gwm2-76f8ef0b","Werkzeug possible resource exhaustion when parsing file data in forms",[2847,2848,2849],"CVE-2024-49767","PYSEC-2026-1860","PYSEC-2026-3417",[169,2849],"2024-10-25T19:44:43Z","2026-07-13T16:43:34.482065524Z",[2854,2855],{"type":938,"score":1161},{"type":1010,"score":1611},[2857,2859,2861,2863,2865,2867,2869,2870,2871,2873,2874],{"type":953,"url":2858},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fsecurity\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",{"type":942,"url":2860},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-49767",{"type":953,"url":2862},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002F5e78c4169b8eb66b91ead3e62d44721b9e1644ee",{"type":953,"url":2864},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fquart\u002Fcommit\u002Fabb04a512496206de279225340ed022852fbf51f",{"type":953,"url":2866},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002F50cfeebcb0727e18cc52ffbeb125f4a66551179b",{"type":953,"url":2868},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fwerkzeug\u002Fcommit\u002Fcbb446fdcada7685fce936ded01b76c08dbd6eb5",{"type":950,"url":1022},{"type":953,"url":2199},{"type":953,"url":2872},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250103-0007",{"type":950,"url":1060},{"type":942,"url":2875},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q34m-jh98-gwm2",[1026],{"id":170,"slug":2878,"dossier":89,"summary":2879,"aliases":2880,"sourceIds":2883,"published":2884,"modified":2885,"checkedAt":7,"severity":2886,"references":2891,"versionKeys":2897,"packageCount":32,"repositoryCount":225},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[2881,2882],"CVE-2026-44431","PYSEC-2026-141",[170,2882],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[2887,2889],{"type":938,"score":2888},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1010,"score":2890},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[2892,2894,2896],{"type":942,"url":2893},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":942,"url":2895},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":950,"url":1084},[1090,1091,1092,1093,1094,2622],{"id":171,"slug":2899,"dossier":45,"summary":2900,"aliases":2901,"sourceIds":2905,"published":2906,"modified":2907,"checkedAt":7,"severity":2908,"references":2911,"versionKeys":2925,"packageCount":32,"repositoryCount":1095},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[2902,2903,2904],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[171,2904],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[2909,2910],{"type":938,"score":1557},{"type":1010,"score":1559},[2912,2914,2916,2918,2920,2921,2922,2923],{"type":953,"url":2913},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":942,"url":2915},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":953,"url":2917},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":953,"url":2919},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":950,"url":1261},{"type":953,"url":1567},{"type":950,"url":1595},{"type":942,"url":2924},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":172,"slug":2927,"dossier":45,"summary":2928,"aliases":2929,"sourceIds":2932,"published":2933,"modified":2934,"checkedAt":7,"severity":2935,"references":2938,"versionKeys":2953,"packageCount":32,"repositoryCount":32},"ghsa-v2w2-w228-c444-26210546","Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data",[2930,2931],"CVE-2026-12484","PYSEC-2026-3634",[172,2931],"2026-07-19T21:30:20Z","2026-08-10T11:40:41.613267729Z",[2936],{"type":938,"score":2937},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2939,2941,2942,2943,2944,2945,2946,2947,2948,2950,2951],{"type":942,"url":2940},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12484",{"type":953,"url":1441},{"type":953,"url":1412},{"type":953,"url":1444},{"type":953,"url":1416},{"type":950,"url":986},{"type":953,"url":988},{"type":953,"url":990},{"type":953,"url":2949},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fab14df49-13b5-4442-b754-3189430bfa28",{"type":950,"url":994},{"type":942,"url":2952},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-v2w2-w228-c444",[998],{"id":173,"slug":2955,"dossier":45,"summary":2956,"aliases":2957,"sourceIds":2961,"published":2962,"modified":2963,"checkedAt":7,"severity":2964,"references":2967,"versionKeys":2981,"packageCount":32,"repositoryCount":1095},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[2958,2959,2960],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[173,2960],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[2965],{"type":1010,"score":2966},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2968,2970,2972,2974,2976,2977,2978,2979],{"type":953,"url":2969},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":942,"url":2971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":953,"url":2973},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":953,"url":2975},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":950,"url":1261},{"type":953,"url":1593},{"type":950,"url":1595},{"type":942,"url":2980},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":174,"slug":2983,"dossier":45,"summary":2984,"aliases":2985,"sourceIds":2989,"published":2990,"modified":2991,"checkedAt":7,"severity":2992,"references":2995,"versionKeys":3033,"packageCount":32,"repositoryCount":1095},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[2986,2987,2988],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[174,2988],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[2993,2994],{"type":938,"score":1161},{"type":1010,"score":2966},[2996,2998,3000,3002,3004,3005,3007,3009,3011,3013,3015,3017,3018,3020,3022,3024,3025,3027,3029,3031],{"type":953,"url":2997},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":942,"url":2999},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":953,"url":3001},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":953,"url":3003},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":950,"url":1261},{"type":953,"url":3006},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":953,"url":3008},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":953,"url":3010},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":942,"url":3012},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":942,"url":3014},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":942,"url":3016},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":942,"url":2098},{"type":942,"url":3019},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":942,"url":3021},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":942,"url":3023},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":942,"url":2100},{"type":942,"url":3026},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":942,"url":3028},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":942,"url":3030},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":942,"url":3032},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[1265,1266,1267,1268,1269,1270,1271,1272],{"id":175,"slug":3035,"dossier":45,"summary":3036,"aliases":3037,"sourceIds":3041,"published":3042,"modified":3043,"checkedAt":7,"severity":3044,"references":3047,"versionKeys":3056,"packageCount":32,"repositoryCount":1095},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[3038,3039,3040],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[175,3040],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[3045,3046],{"type":938,"score":1557},{"type":1010,"score":1559},[3048,3050,3052,3054,3055],{"type":942,"url":3049},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":942,"url":3051},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":953,"url":3053},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":950,"url":1261},{"type":942,"url":1567},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":176,"slug":3058,"dossier":45,"summary":3059,"aliases":3060,"sourceIds":3064,"published":3065,"modified":3066,"checkedAt":7,"severity":3067,"references":3070,"versionKeys":3084,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[3061,3062,3063],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[176,3063],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[3068],{"type":938,"score":3069},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[3071,3073,3075,3077,3079,3081,3082],{"type":942,"url":3072},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":942,"url":3074},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":953,"url":3076},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":947,"url":3078},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":953,"url":3080},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":950,"url":1261},{"type":953,"url":3083},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[1268],{"id":177,"slug":3086,"dossier":45,"summary":3087,"aliases":3088,"sourceIds":3092,"published":3093,"modified":3094,"checkedAt":7,"severity":3095,"references":3098,"versionKeys":3109,"packageCount":32,"repositoryCount":1095},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[3089,3090,3091],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[177,3091],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[3096],{"type":938,"score":3097},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[3099,3101,3103,3105,3107,3108],{"type":1140,"url":3100},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":942,"url":3102},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":947,"url":3104},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":947,"url":3106},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":950,"url":1261},{"type":942,"url":1593},[1265,1266,1267,1268,1269,1270,1271,1272],{"id":178,"slug":3111,"dossier":89,"summary":191,"aliases":3112,"sourceIds":3115,"published":3116,"modified":3117,"checkedAt":7,"severity":3118,"references":3121,"versionKeys":3136,"packageCount":32,"repositoryCount":2373},"pysec-2026-2132-627bf7c7",[3113,3114],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[178],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[3119],{"type":938,"score":3120},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3122,3124,3126,3128,3130,3132,3134],{"type":953,"url":3123},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":953,"url":3125},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":942,"url":3127},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":942,"url":3129},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1476,"url":3131},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":947,"url":3133},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1140,"url":3135},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[3137,3138,3139,3140,3141,3142],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",1786591831311]