[{"data":1,"prerenderedAt":5783},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-7811":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":265,"related":268},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":90,"resolvedComponentCount":98,"artifactResolvedComponentCount":98,"exactManifestPinCount":37,"packageCount":98,"ecosystems":99,"aiPackageCount":101,"licenseExpressionCount":35,"unknownLicensePackageCount":32,"advisoryIds":102,"advisoryCount":263,"providers":264},"opencode:7811","opencode-7811",7811,"Retrieval Evaluation","uba-ki-lab\u002Fretrieval-evaluation","collecting human feedback of retrieval results; Keywords: uba, umweltbundesamt, ki-lab, NLP, LLM, Argilla, Semantic Search","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation","f64bf528432908908d92b8263d6933301033bb7f","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fcommit\u002Ff64bf528432908908d92b8263d6933301033bb7f","2025-11-26T09:10:11.202Z","2025-11-17T10:23:51.000Z",{"complete":89,"entryCount":73,"truncated":45},true,[91],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},"uv-lock","20c0181bf785c3e980512ba2de16e0fe3f207bad","https:\u002F\u002Fgitlab.opencode.de\u002Fuba-ki-lab\u002Fretrieval-evaluation\u002F-\u002Fblob\u002Ff64bf528432908908d92b8263d6933301033bb7f\u002Fuv.lock","2b93eec49931aff00a2c694c2c913da38d615033ab4eb9432fdb647839db6dc5",408810,"parsed",150,[100],"pypi",12,[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262],"GHSA-248v-346w-9cwc","GHSA-29pf-2h5f-8g72","GHSA-2fqr-mr3j-6wp8","GHSA-2vrm-gr82-f7m5","GHSA-2wc2-fm75-p42x","GHSA-2xpw-w6gg-jr37","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-38jv-5279-wg99","GHSA-3wq7-rqq7-wx6j","GHSA-428g-f7cq-pgp5","GHSA-45hq-cxwh-f6vc","GHSA-469j-vmhf-r6v7","GHSA-48p4-8xcf-vxj5","GHSA-4fvr-rgm6-gqmc","GHSA-4m7w-qmgq-4wj5","GHSA-4w7r-h757-3r74","GHSA-4x4j-2g7c-83w6","GHSA-4xgf-cpjx-pc3j","GHSA-5239-wwwm-4pmq","GHSA-53q9-r3pm-6pq6","GHSA-54jq-c3m8-4m76","GHSA-597g-3phw-6986","GHSA-59p9-h35m-wg4g","GHSA-5rjg-fvgr-3xxf","GHSA-5wmx-573v-2qwq","GHSA-5x94-69rx-g8h2","GHSA-5xmw-vc9v-4wf2","GHSA-62p4-gmf7-7g93","GHSA-63hf-3vf5-4wqf","GHSA-63hw-fmq6-xxg2","GHSA-63vm-454h-vhhq","GHSA-65pc-fj4g-8rjx","GHSA-68j8-pq59-fqgm","GHSA-69f9-5gxw-wvc2","GHSA-69w3-r845-3855","GHSA-6hm5-jgcp-p838","GHSA-6jhg-hg63-jvvf","GHSA-6mq8-rvhq-8wgg","GHSA-6r8x-57c9-28j4","GHSA-6rvg-6v2m-4j46","GHSA-7gcm-g887-7qv7","GHSA-7p94-766c-hgjp","GHSA-836r-79rf-4m37","GHSA-848c-c2cx-j7qx","GHSA-887c-mr87-cxwp","GHSA-8ppf-4f7h-5ppj","GHSA-8qvm-5x2c-j2w7","GHSA-8v84-f9pq-wr9x","GHSA-9356-575x-2w9m","GHSA-9548-qrrj-x5pj","GHSA-966j-vmvw-g2g9","GHSA-9hjg-9r4m-mvj7","GHSA-9hw9-ch79-4vh6","GHSA-9wx4-h78v-vm56","GHSA-9x8q-7h8h-wcw9","GHSA-c427-h43c-vf67","GHSA-c678-jfcj-6jmf","GHSA-cfh3-3jmp-rvhc","GHSA-cpwx-vrp4-4pq7","GHSA-cq5v-8q36-5273","GHSA-cx63-2mw6-8hw5","GHSA-f4hp-rmr7-r7v8","GHSA-fg7f-2386-8897","GHSA-fgcw-684q-jj6r","GHSA-fh55-r93g-j68g","GHSA-fj7v-r99m-22gq","GHSA-fpwr-67px-3qhx","GHSA-g3cq-j2xw-wf74","GHSA-g7vv-2v7x-gj9p","GHSA-g84x-mcqj-x9qq","GHSA-gc5v-m9x4-r6x2","GHSA-gfwx-w7gr-fvh7","GHSA-gm62-xv2j-4w53","GHSA-gmj6-6f8f-6699","GHSA-gphh-9q3h-jgpp","GHSA-h35f-9h28-mq5c","GHSA-h75v-3vvj-5mfj","GHSA-h8wq-7xc4-p3qx","GHSA-hcc4-c3v8-rx92","GHSA-hg6j-4rv6-33pg","GHSA-hm4w-wwcw-mr6r","GHSA-hpj7-wq8m-9hgp","GHSA-hx9q-6w63-j58v","GHSA-hxxf-235m-72v3","GHSA-jg22-mg44-37j8","GHSA-jj3x-wxrx-4x23","GHSA-jjj6-mw9f-p565","GHSA-jjph-296x-mrcr","GHSA-jm6w-m3j8-898g","GHSA-jr27-m4p2-rc6r","GHSA-m4p7-r5rc-7g4j","GHSA-m5qp-6w8w-w647","GHSA-m6qw-4cw2-hm4m","GHSA-mf9v-mfxr-j63j","GHSA-mf9w-mj56-hr94","GHSA-mfx4-hv73-q22v","GHSA-mq44-7p77-q5h7","GHSA-mqqc-3gqh-h2x8","GHSA-mwh4-6h8g-pg8w","GHSA-p4gq-832x-fm9v","GHSA-p998-jp59-783m","GHSA-pg7v-jwj7-p798","GHSA-phhr-52qp-3mj4","GHSA-phj9-mv4w-65pm","GHSA-pq67-6m6q-mj2v","GHSA-pwv6-vv43-88gr","GHSA-q2wp-rjmx-x6x9","GHSA-q2x7-8rv6-6q7h","GHSA-qccp-gfcp-xxvc","GHSA-qfhq-4f3w-5fph","GHSA-qmgc-5h2g-mvrw","GHSA-qq3j-4f4f-9583","GHSA-qvv7-cg9c-w4x3","GHSA-qxrp-vhvm-j765","GHSA-r73j-pqj5-w3x7","GHSA-rcv9-qm8p-9p6j","GHSA-rf74-v2fm-23pw","GHSA-rgxp-2hwp-jwgg","GHSA-rrmf-rvhw-rf47","GHSA-vfmq-68hx-4jfw","GHSA-vgrw-7cvw-pwgx","GHSA-vjc4-5qp5-m44j","GHSA-vqfr-h8mv-ghfj","GHSA-w2fm-2cpv-w7v5","GHSA-w853-jp5j-5j7f","GHSA-whj4-6x5x-4v2j","GHSA-wjx4-4jcj-g98j","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","GHSA-xcgm-r5h9-7989","GHSA-xg8h-j46f-w952","GHSA-xh95-f55m-82fw","GHSA-xj96-63gp-2gmr","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2085","PYSEC-2026-2132","PYSEC-2026-2286","PYSEC-2026-597","PYSEC-2026-99",160,[],{"files":266,"occurrenceCount":98},[267],{"path":54,"kind":92,"blobSha":93,"sourceUrl":94,"commitSha":84,"contentSha256":95,"byteCount":96,"state":97,"componentCount":98},{"packages":269,"vulnerabilities":1648},[270,284,296,309,319,331,338,348,357,366,375,384,393,404,416,426,436,447,456,466,475,486,495,504,513,523,532,541,550,559,568,577,588,597,606,615,624,634,643,653,662,671,680,689,698,707,716,725,734,743,752,761,770,779,788,797,805,814,823,832,841,850,859,868,877,888,898,907,915,924,933,942,951,960,968,977,986,995,1004,1013,1022,1031,1041,1050,1059,1068,1077,1086,1095,1104,1113,1122,1131,1141,1150,1159,1168,1176,1185,1194,1203,1212,1221,1230,1239,1248,1256,1265,1273,1282,1291,1301,1310,1319,1328,1337,1346,1355,1363,1372,1381,1390,1399,1408,1417,1426,1436,1445,1454,1463,1472,1481,1489,1498,1507,1516,1525,1534,1543,1552,1561,1570,1579,1588,1596,1604,1613,1622,1631,1639],{"id":271,"slug":272,"identity":273,"label":274,"aiRelevant":89,"provider":275,"advisoryCount":278,"licenseExpressions":279,"versions":281,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":283},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":276,"label":277},"hugging-face","Hugging Face",25,[280],"Apache-2.0",[282],"4.57.1",[54],{"id":285,"slug":286,"identity":287,"label":288,"aiRelevant":89,"provider":289,"advisoryCount":290,"licenseExpressions":291,"versions":293,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":295},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[292],"BSD-3-Clause",[294],"2.9.1",[54],{"id":297,"slug":298,"identity":299,"label":300,"aiRelevant":89,"provider":301,"advisoryCount":37,"licenseExpressions":304,"versions":306,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":308},"package:pypi:anthropic","anthropic-829dc3db","pypi:anthropic","Anthropic SDK",{"id":302,"label":303},"anthropic","Anthropic",[305],"MIT",[307],"0.46.0",[54],{"id":310,"slug":311,"identity":312,"label":313,"aiRelevant":89,"provider":314,"advisoryCount":37,"licenseExpressions":315,"versions":316,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":318},"package:pypi:datasets","datasets-e12c1359","pypi:datasets","Hugging Face Datasets",{"id":276,"label":277},[280],[317],"4.4.1",[54],{"id":320,"slug":321,"identity":322,"label":323,"aiRelevant":89,"provider":324,"advisoryCount":37,"licenseExpressions":327,"versions":328,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":330},"package:pypi:llama-index-embeddings-openai-like","llama-index-embeddings-openai-like-28b6dcf5","pypi:llama-index-embeddings-openai-like","LlamaIndex · Embeddings OpenAI Like",{"id":325,"label":326},"openai","OpenAI",[305],[329],"0.2.2",[54],{"id":70,"slug":71,"identity":332,"label":72,"aiRelevant":89,"provider":333,"advisoryCount":37,"licenseExpressions":334,"versions":335,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":337},"pypi:openai",{"id":325,"label":326},[280],[336],"1.109.1",[54],{"id":339,"slug":340,"identity":341,"label":342,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":343,"versions":345,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":347},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[344],"non-standard",[346],"0.22.1",[54],{"id":349,"slug":350,"identity":351,"label":352,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":353,"versions":354,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":356},"package:pypi:llama-index-core","llama-index-core-6f097879","pypi:llama-index-core","LlamaIndex · Core",[305],[355],"0.14.8",[54],{"id":358,"slug":359,"identity":360,"label":361,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":362,"versions":363,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":365},"package:pypi:llama-index-vector-stores-milvus","llama-index-vector-stores-milvus-729b70f8","pypi:llama-index-vector-stores-milvus","LlamaIndex · Vector Stores Milvus",[305],[364],"0.9.3",[54],{"id":367,"slug":368,"identity":369,"label":370,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":371,"versions":372,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":374},"package:pypi:pymilvus","pymilvus-b77631af","pypi:pymilvus","Milvus Client",[344],[373],"2.6.3",[54],{"id":376,"slug":377,"identity":378,"label":379,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":380,"versions":381,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":383},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[292,344],[382],"1.7.2",[54],{"id":385,"slug":386,"identity":387,"label":388,"aiRelevant":89,"provider":289,"advisoryCount":37,"licenseExpressions":389,"versions":390,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":392},"package:pypi:tiktoken","tiktoken-06b251a3","pypi:tiktoken","tiktoken",[344],[391],"0.12.0",[54],{"id":394,"slug":395,"identity":396,"label":397,"aiRelevant":45,"provider":289,"advisoryCount":398,"licenseExpressions":399,"versions":401,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":403},"package:pypi:aiohttp","aiohttp-5a806a63","pypi:aiohttp","aiohttp",33,[280,400],"Apache-2.0 AND MIT",[402],"3.13.2",[54],{"id":405,"slug":406,"identity":407,"label":408,"aiRelevant":45,"provider":289,"advisoryCount":409,"licenseExpressions":410,"versions":413,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":415},"package:pypi:pillow","pillow-834347dd","pypi:pillow","pillow",20,[411,412],"HPND","MIT-CMU",[414],"10.4.0",[54],{"id":417,"slug":418,"identity":419,"label":420,"aiRelevant":45,"provider":289,"advisoryCount":421,"licenseExpressions":422,"versions":423,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":425},"package:pypi:nltk","nltk-ec2a0f85","pypi:nltk","nltk",16,[280],[424],"3.9.2",[54],{"id":427,"slug":428,"identity":429,"label":430,"aiRelevant":45,"provider":289,"advisoryCount":431,"licenseExpressions":432,"versions":433,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":435},"package:pypi:urllib3","urllib3-fa68f32c","pypi:urllib3","urllib3",7,[305],[434],"2.5.0",[54],{"id":437,"slug":438,"identity":439,"label":440,"aiRelevant":45,"provider":289,"advisoryCount":441,"licenseExpressions":442,"versions":444,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":446},"package:pypi:pyasn1","pyasn1-348780fa","pypi:pyasn1","pyasn1",5,[443],"BSD-2-Clause",[445],"0.6.1",[54],{"id":448,"slug":449,"identity":450,"label":451,"aiRelevant":45,"provider":289,"advisoryCount":34,"licenseExpressions":452,"versions":453,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":455},"package:pypi:jinja2","jinja2-f7d34747","pypi:jinja2","jinja2",[292,344],[454],"3.1.6",[54],{"id":457,"slug":458,"identity":459,"label":460,"aiRelevant":45,"provider":289,"advisoryCount":461,"licenseExpressions":462,"versions":463,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":465},"package:pypi:requests","requests-53653f76","pypi:requests","requests",3,[280],[464],"2.32.5",[54],{"id":467,"slug":468,"identity":469,"label":470,"aiRelevant":45,"provider":289,"advisoryCount":461,"licenseExpressions":471,"versions":472,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":474},"package:pypi:setuptools","setuptools-fe37c31a","pypi:setuptools","setuptools",[305],[473],"80.9.0",[54],{"id":476,"slug":477,"identity":478,"label":479,"aiRelevant":45,"provider":289,"advisoryCount":480,"licenseExpressions":481,"versions":483,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":485},"package:pypi:filelock","filelock-b1c63968","pypi:filelock","filelock",2,[305,482],"Unlicense",[484],"3.20.0",[54],{"id":487,"slug":488,"identity":489,"label":490,"aiRelevant":45,"provider":289,"advisoryCount":480,"licenseExpressions":491,"versions":492,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":494},"package:pypi:protobuf","protobuf-6e30009a","pypi:protobuf","protobuf",[292],[493],"6.33.1",[54],{"id":496,"slug":497,"identity":498,"label":499,"aiRelevant":45,"provider":289,"advisoryCount":480,"licenseExpressions":500,"versions":501,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":503},"package:pypi:soupsieve","soupsieve-91552d8b","pypi:soupsieve","soupsieve",[305],[502],"2.8",[54],{"id":505,"slug":506,"identity":507,"label":508,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":509,"versions":510,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":512},"package:pypi:banks","banks-f10f5e94","pypi:banks","banks",[305],[511],"2.2.0",[54],{"id":514,"slug":515,"identity":516,"label":517,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":518,"versions":520,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":522},"package:pypi:certifi","certifi-d4f0c37e","pypi:certifi","certifi",[519],"MPL-2.0",[521],"2025.11.12",[54],{"id":524,"slug":525,"identity":526,"label":527,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":528,"versions":529,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":531},"package:pypi:click","click-ef97f731","pypi:click","click",[292,344],[530],"8.3.1",[54],{"id":533,"slug":534,"identity":535,"label":536,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":537,"versions":538,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":540},"package:pypi:h11","h11-48165ab1","pypi:h11","h11",[305],[539],"0.16.0",[54],{"id":542,"slug":543,"identity":544,"label":545,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":546,"versions":547,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":549},"package:pypi:idna","idna-994c9929","pypi:idna","idna",[292,344],[548],"3.11",[54],{"id":551,"slug":552,"identity":553,"label":554,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":555,"versions":556,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":558},"package:pypi:lxml","lxml-53ddfa54","pypi:lxml","lxml",[292],[557],"6.0.2",[54],{"id":560,"slug":561,"identity":562,"label":563,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":564,"versions":565,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":567},"package:pypi:markdown","markdown-80f66882","pypi:markdown","markdown",[292],[566],"3.10",[54],{"id":569,"slug":570,"identity":571,"label":572,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":573,"versions":574,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":576},"package:pypi:marshmallow","marshmallow-abf69093","pypi:marshmallow","marshmallow",[305],[575],"3.26.1",[54],{"id":578,"slug":579,"identity":580,"label":581,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":582,"versions":585,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":587},"package:pypi:orjson","orjson-0293c856","pypi:orjson","orjson",[583,584],"Apache-2.0 OR MIT","MPL-2.0 AND (Apache-2.0 OR MIT)",[586],"3.11.4",[54],{"id":589,"slug":590,"identity":591,"label":592,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":593,"versions":594,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":596},"package:pypi:pyarrow","pyarrow-facb8516","pypi:pyarrow","pyarrow",[280,344],[595],"22.0.0",[54],{"id":598,"slug":599,"identity":600,"label":601,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":602,"versions":603,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":605},"package:pypi:pydantic-settings","pydantic-settings-d677745f","pypi:pydantic-settings","pydantic-settings",[305],[604],"2.12.0",[54],{"id":607,"slug":608,"identity":609,"label":610,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":611,"versions":612,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":614},"package:pypi:pygments","pygments-ad71bc11","pypi:pygments","pygments",[443],[613],"2.19.2",[54],{"id":616,"slug":617,"identity":618,"label":619,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":620,"versions":621,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":623},"package:pypi:python-dotenv","python-dotenv-27b12285","pypi:python-dotenv","python-dotenv",[292],[622],"1.2.1",[54],{"id":625,"slug":626,"identity":627,"label":628,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":629,"versions":631,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":633},"package:pypi:tqdm","tqdm-04b01f90","pypi:tqdm","tqdm",[630],"MIT AND MPL-2.0",[632],"4.67.1",[54],{"id":635,"slug":636,"identity":637,"label":638,"aiRelevant":45,"provider":289,"advisoryCount":32,"licenseExpressions":639,"versions":640,"dossier":89,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":642},"package:pypi:virtualenv","virtualenv-aeb2a546","pypi:virtualenv","virtualenv",[305],[641],"20.35.4",[54],{"id":644,"slug":645,"identity":646,"label":647,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":648,"versions":650,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":652},"package:pypi:aiohappyeyeballs","aiohappyeyeballs-ea4657b8","pypi:aiohappyeyeballs","aiohappyeyeballs",[649],"PSF-2.0",[651],"2.6.1",[54],{"id":654,"slug":655,"identity":656,"label":657,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":658,"versions":659,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":661},"package:pypi:aiosignal","aiosignal-b6794e75","pypi:aiosignal","aiosignal",[280],[660],"1.4.0",[54],{"id":663,"slug":664,"identity":665,"label":666,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":667,"versions":668,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":670},"package:pypi:aiosqlite","aiosqlite-c379fabf","pypi:aiosqlite","aiosqlite",[305],[669],"0.21.0",[54],{"id":672,"slug":673,"identity":674,"label":675,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":676,"versions":677,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":679},"package:pypi:annotated-types","annotated-types-2304c38b","pypi:annotated-types","annotated-types",[305],[678],"0.7.0",[54],{"id":681,"slug":682,"identity":683,"label":684,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":685,"versions":686,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":688},"package:pypi:antlr4-python3-runtime","antlr4-python3-runtime-52028339","pypi:antlr4-python3-runtime","antlr4-python3-runtime",[344],[687],"4.9.3",[54],{"id":690,"slug":691,"identity":692,"label":693,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":694,"versions":695,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":697},"package:pypi:anyio","anyio-399e5280","pypi:anyio","anyio",[305],[696],"4.11.0",[54],{"id":699,"slug":700,"identity":701,"label":702,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":703,"versions":704,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":706},"package:pypi:argilla","argilla-35b6bbbe","pypi:argilla","argilla",[280],[705],"2.8.0",[54],{"id":708,"slug":709,"identity":710,"label":711,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":712,"versions":713,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":715},"package:pypi:attrs","attrs-2e7954ac","pypi:attrs","attrs",[305],[714],"25.4.0",[54],{"id":717,"slug":718,"identity":719,"label":720,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":721,"versions":722,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":724},"package:pypi:beautifulsoup4","beautifulsoup4-eddf0c04","pypi:beautifulsoup4","beautifulsoup4",[305],[723],"4.14.2",[54],{"id":726,"slug":727,"identity":728,"label":729,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":730,"versions":731,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":733},"package:pypi:cachetools","cachetools-84fe6563","pypi:cachetools","cachetools",[305],[732],"6.2.2",[54],{"id":735,"slug":736,"identity":737,"label":738,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":739,"versions":740,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":742},"package:pypi:cfgv","cfgv-4583061f","pypi:cfgv","cfgv",[305],[741],"3.4.0",[54],{"id":744,"slug":745,"identity":746,"label":747,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":748,"versions":749,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":751},"package:pypi:charset-normalizer","charset-normalizer-74ccb20a","pypi:charset-normalizer","charset-normalizer",[305],[750],"3.4.4",[54],{"id":753,"slug":754,"identity":755,"label":756,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":757,"versions":758,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":760},"package:pypi:colorama","colorama-abaf57c3","pypi:colorama","colorama",[344],[759],"0.4.6",[54],{"id":762,"slug":763,"identity":764,"label":765,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":766,"versions":767,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":769},"package:pypi:dataclasses-json","dataclasses-json-54bdba52","pypi:dataclasses-json","dataclasses-json",[305],[768],"0.6.7",[54],{"id":771,"slug":772,"identity":773,"label":774,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":775,"versions":776,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":778},"package:pypi:deprecated","deprecated-e7bb8a9a","pypi:deprecated","deprecated",[305],[777],"1.3.1",[54],{"id":780,"slug":781,"identity":782,"label":783,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":784,"versions":785,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":787},"package:pypi:dill","dill-e2d26698","pypi:dill","dill",[292],[786],"0.4.0",[54],{"id":789,"slug":790,"identity":791,"label":792,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":793,"versions":794,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":796},"package:pypi:dirtyjson","dirtyjson-e423c509","pypi:dirtyjson","dirtyjson",[305],[795],"1.0.8",[54],{"id":798,"slug":799,"identity":800,"label":801,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":802,"versions":803,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":804},"package:pypi:distlib","distlib-d66be865","pypi:distlib","distlib",[649],[786],[54],{"id":806,"slug":807,"identity":808,"label":809,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":810,"versions":811,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":813},"package:pypi:distro","distro-36b318e9","pypi:distro","distro",[280],[812],"1.9.0",[54],{"id":815,"slug":816,"identity":817,"label":818,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":819,"versions":820,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":822},"package:pypi:einops","einops-248eadc2","pypi:einops","einops",[305],[821],"0.8.1",[54],{"id":824,"slug":825,"identity":826,"label":827,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":828,"versions":829,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":831},"package:pypi:filetype","filetype-60d6f43a","pypi:filetype","filetype",[305],[830],"1.2.0",[54],{"id":833,"slug":834,"identity":835,"label":836,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":837,"versions":838,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":840},"package:pypi:frozenlist","frozenlist-110237da","pypi:frozenlist","frozenlist",[280],[839],"1.8.0",[54],{"id":842,"slug":843,"identity":844,"label":845,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":846,"versions":847,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":849},"package:pypi:fsspec","fsspec-b1a7c311","pypi:fsspec","fsspec",[292,344],[848],"2025.10.0",[54],{"id":851,"slug":852,"identity":853,"label":854,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":855,"versions":856,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":858},"package:pypi:ftfy","ftfy-b3100e16","pypi:ftfy","ftfy",[280],[857],"6.3.1",[54],{"id":860,"slug":861,"identity":862,"label":863,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":864,"versions":865,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":867},"package:pypi:google-auth","google-auth-42cfc01f","pypi:google-auth","google-auth",[280],[866],"2.43.0",[54],{"id":869,"slug":870,"identity":871,"label":872,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":873,"versions":874,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":876},"package:pypi:google-genai","google-genai-4ef56ea2","pypi:google-genai","google-genai",[280],[875],"1.50.1",[54],{"id":878,"slug":879,"identity":880,"label":881,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":882,"versions":885,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":887},"package:pypi:greenlet","greenlet-cd6f7934","pypi:greenlet","greenlet",[305,883,884],"MIT AND PSF-2.0","MIT AND Python-2.0",[886],"3.2.4",[54],{"id":889,"slug":890,"identity":891,"label":892,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":893,"versions":895,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":897},"package:pypi:griffe","griffe-3cc58065","pypi:griffe","griffe",[894],"ISC",[896],"1.15.0",[54],{"id":899,"slug":900,"identity":901,"label":902,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":903,"versions":904,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":906},"package:pypi:grpcio","grpcio-40fa763c","pypi:grpcio","grpcio",[280],[905],"1.76.0",[54],{"id":908,"slug":909,"identity":910,"label":911,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":912,"versions":913,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":914},"package:pypi:hf-xet","hf-xet-732ec6c8","pypi:hf-xet","hf-xet",[280],[830],[54],{"id":916,"slug":917,"identity":918,"label":919,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":920,"versions":921,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":923},"package:pypi:httpcore","httpcore-ba6ae671","pypi:httpcore","httpcore",[292],[922],"1.0.9",[54],{"id":925,"slug":926,"identity":927,"label":928,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":929,"versions":930,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":932},"package:pypi:httpx","httpx-a512a166","pypi:httpx","httpx",[292],[931],"0.28.1",[54],{"id":934,"slug":935,"identity":936,"label":937,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":938,"versions":939,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":941},"package:pypi:huggingface-hub","huggingface-hub-443ec6ef","pypi:huggingface-hub","huggingface-hub",[280,344],[940],"0.36.0",[54],{"id":943,"slug":944,"identity":945,"label":946,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":947,"versions":948,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":950},"package:pypi:hydra-core","hydra-core-88ed8b5b","pypi:hydra-core","hydra-core",[305],[949],"1.3.2",[54],{"id":952,"slug":953,"identity":954,"label":955,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":956,"versions":957,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":959},"package:pypi:identify","identify-bd45ae56","pypi:identify","identify",[305],[958],"2.6.15",[54],{"id":961,"slug":962,"identity":963,"label":964,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":965,"versions":966,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":967},"package:pypi:jiter","jiter-d62b34e9","pypi:jiter","jiter",[305],[391],[54],{"id":969,"slug":970,"identity":971,"label":972,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":973,"versions":974,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":976},"package:pypi:joblib","joblib-8cbb7872","pypi:joblib","joblib",[292],[975],"1.5.2",[54],{"id":978,"slug":979,"identity":980,"label":981,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":982,"versions":983,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":985},"package:pypi:llama-index-embeddings-openai","llama-index-embeddings-openai-b4ccbb6b","pypi:llama-index-embeddings-openai","llama-index-embeddings-openai",[305],[984],"0.5.1",[54],{"id":987,"slug":988,"identity":989,"label":990,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":991,"versions":992,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":994},"package:pypi:llama-index-instrumentation","llama-index-instrumentation-abea2496","pypi:llama-index-instrumentation","llama-index-instrumentation",[305],[993],"0.4.2",[54],{"id":996,"slug":997,"identity":998,"label":999,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1000,"versions":1001,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1003},"package:pypi:llama-index-workflows","llama-index-workflows-a24215fc","pypi:llama-index-workflows","llama-index-workflows",[305],[1002],"2.11.1",[54],{"id":1005,"slug":1006,"identity":1007,"label":1008,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1009,"versions":1010,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1012},"package:pypi:markdown-it-py","markdown-it-py-27073f5e","pypi:markdown-it-py","markdown-it-py",[305],[1011],"4.0.0",[54],{"id":1014,"slug":1015,"identity":1016,"label":1017,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1018,"versions":1019,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1021},"package:pypi:markdown2","markdown2-6999cefd","pypi:markdown2","markdown2",[305],[1020],"2.5.4",[54],{"id":1023,"slug":1024,"identity":1025,"label":1026,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1027,"versions":1028,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1030},"package:pypi:markdownify","markdownify-f49bbc0a","pypi:markdownify","markdownify",[305],[1029],"1.2.2",[54],{"id":1032,"slug":1033,"identity":1034,"label":1035,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1036,"versions":1038,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1040},"package:pypi:marker-pdf","marker-pdf-6e4f313f","pypi:marker-pdf","marker-pdf",[1037],"GPL-3.0-or-later",[1039],"1.10.1",[54],{"id":1042,"slug":1043,"identity":1044,"label":1045,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1046,"versions":1047,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1049},"package:pypi:markupsafe","markupsafe-1bdd4c7f","pypi:markupsafe","markupsafe",[292,344],[1048],"3.0.3",[54],{"id":1051,"slug":1052,"identity":1053,"label":1054,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1055,"versions":1056,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1058},"package:pypi:mdurl","mdurl-e6f5f075","pypi:mdurl","mdurl",[305],[1057],"0.1.2",[54],{"id":1060,"slug":1061,"identity":1062,"label":1063,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1064,"versions":1065,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1067},"package:pypi:milvus-lite","milvus-lite-f807c8ab","pypi:milvus-lite","milvus-lite",[],[1066],"2.5.1",[54],{"id":1069,"slug":1070,"identity":1071,"label":1072,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1073,"versions":1074,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1076},"package:pypi:mpmath","mpmath-4ccb7a41","pypi:mpmath","mpmath",[344],[1075],"1.3.0",[54],{"id":1078,"slug":1079,"identity":1080,"label":1081,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1082,"versions":1083,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1085},"package:pypi:multidict","multidict-b407a4ac","pypi:multidict","multidict",[280],[1084],"6.7.0",[54],{"id":1087,"slug":1088,"identity":1089,"label":1090,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1091,"versions":1092,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1094},"package:pypi:multiprocess","multiprocess-9b2083dd","pypi:multiprocess","multiprocess",[292],[1093],"0.70.18",[54],{"id":1096,"slug":1097,"identity":1098,"label":1099,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1100,"versions":1101,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1103},"package:pypi:mypy-extensions","mypy-extensions-702f6cf3","pypi:mypy-extensions","mypy-extensions",[305],[1102],"1.1.0",[54],{"id":1105,"slug":1106,"identity":1107,"label":1108,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1109,"versions":1110,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1112},"package:pypi:nest-asyncio","nest-asyncio-f76531b1","pypi:nest-asyncio","nest-asyncio",[344],[1111],"1.6.0",[54],{"id":1114,"slug":1115,"identity":1116,"label":1117,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1118,"versions":1119,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1121},"package:pypi:networkx","networkx-c2336a8d","pypi:networkx","networkx",[292,344],[1120],"3.5",[54],{"id":1123,"slug":1124,"identity":1125,"label":1126,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1127,"versions":1128,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1130},"package:pypi:nodeenv","nodeenv-71203cea","pypi:nodeenv","nodeenv",[344],[1129],"1.9.1",[54],{"id":1132,"slug":1133,"identity":1134,"label":1135,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1136,"versions":1138,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1140},"package:pypi:numpy","numpy-ba79b98d","pypi:numpy","numpy",[1137,344],"0BSD AND BSD-3-Clause AND CC0-1.0 AND MIT AND Zlib",[1139],"2.3.5",[54],{"id":1142,"slug":1143,"identity":1144,"label":1145,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1146,"versions":1147,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1149},"package:pypi:nvidia-cublas-cu12","nvidia-cublas-cu12-1d052261","pypi:nvidia-cublas-cu12","nvidia-cublas-cu12",[344],[1148],"12.8.4.1",[54],{"id":1151,"slug":1152,"identity":1153,"label":1154,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1155,"versions":1156,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1158},"package:pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12-973480f1","pypi:nvidia-cuda-cupti-cu12","nvidia-cuda-cupti-cu12",[344],[1157],"12.8.90",[54],{"id":1160,"slug":1161,"identity":1162,"label":1163,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1164,"versions":1165,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1167},"package:pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12-e32b7f38","pypi:nvidia-cuda-nvrtc-cu12","nvidia-cuda-nvrtc-cu12",[344],[1166],"12.8.93",[54],{"id":1169,"slug":1170,"identity":1171,"label":1172,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1173,"versions":1174,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1175},"package:pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12-2b875d2a","pypi:nvidia-cuda-runtime-cu12","nvidia-cuda-runtime-cu12",[344],[1157],[54],{"id":1177,"slug":1178,"identity":1179,"label":1180,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1181,"versions":1182,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1184},"package:pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12-a21dce6d","pypi:nvidia-cudnn-cu12","nvidia-cudnn-cu12",[344],[1183],"9.10.2.21",[54],{"id":1186,"slug":1187,"identity":1188,"label":1189,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1190,"versions":1191,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1193},"package:pypi:nvidia-cufft-cu12","nvidia-cufft-cu12-21ff54dd","pypi:nvidia-cufft-cu12","nvidia-cufft-cu12",[344],[1192],"11.3.3.83",[54],{"id":1195,"slug":1196,"identity":1197,"label":1198,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1199,"versions":1200,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1202},"package:pypi:nvidia-cufile-cu12","nvidia-cufile-cu12-14048140","pypi:nvidia-cufile-cu12","nvidia-cufile-cu12",[344],[1201],"1.13.1.3",[54],{"id":1204,"slug":1205,"identity":1206,"label":1207,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1208,"versions":1209,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1211},"package:pypi:nvidia-curand-cu12","nvidia-curand-cu12-2fed778b","pypi:nvidia-curand-cu12","nvidia-curand-cu12",[344],[1210],"10.3.9.90",[54],{"id":1213,"slug":1214,"identity":1215,"label":1216,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1217,"versions":1218,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1220},"package:pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12-7db0a33a","pypi:nvidia-cusolver-cu12","nvidia-cusolver-cu12",[344],[1219],"11.7.3.90",[54],{"id":1222,"slug":1223,"identity":1224,"label":1225,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1226,"versions":1227,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1229},"package:pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12-d7e6a309","pypi:nvidia-cusparse-cu12","nvidia-cusparse-cu12",[344],[1228],"12.5.8.93",[54],{"id":1231,"slug":1232,"identity":1233,"label":1234,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1235,"versions":1236,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1238},"package:pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12-97587f50","pypi:nvidia-cusparselt-cu12","nvidia-cusparselt-cu12",[344],[1237],"0.7.1",[54],{"id":1240,"slug":1241,"identity":1242,"label":1243,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1244,"versions":1245,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1247},"package:pypi:nvidia-nccl-cu12","nvidia-nccl-cu12-90361558","pypi:nvidia-nccl-cu12","nvidia-nccl-cu12",[292,344],[1246],"2.27.5",[54],{"id":1249,"slug":1250,"identity":1251,"label":1252,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1253,"versions":1254,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1255},"package:pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12-6d08af75","pypi:nvidia-nvjitlink-cu12","nvidia-nvjitlink-cu12",[344],[1166],[54],{"id":1257,"slug":1258,"identity":1259,"label":1260,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1261,"versions":1262,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1264},"package:pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12-d7141303","pypi:nvidia-nvshmem-cu12","nvidia-nvshmem-cu12",[292,344],[1263],"3.3.20",[54],{"id":1266,"slug":1267,"identity":1268,"label":1269,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1270,"versions":1271,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1272},"package:pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12-9a2d0378","pypi:nvidia-nvtx-cu12","nvidia-nvtx-cu12",[280,344],[1157],[54],{"id":1274,"slug":1275,"identity":1276,"label":1277,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1278,"versions":1279,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1281},"package:pypi:omegaconf","omegaconf-7670402e","pypi:omegaconf","omegaconf",[292],[1280],"2.3.0",[54],{"id":1283,"slug":1284,"identity":1285,"label":1286,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1287,"versions":1288,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1290},"package:pypi:opencv-python-headless","opencv-python-headless-4c615221","pypi:opencv-python-headless","opencv-python-headless",[280],[1289],"4.11.0.86",[54],{"id":1292,"slug":1293,"identity":1294,"label":1295,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1296,"versions":1298,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1300},"package:pypi:packaging","packaging-78ee1f47","pypi:packaging","packaging",[1297,344],"Apache-2.0 OR BSD-2-Clause",[1299],"25.0",[54],{"id":1302,"slug":1303,"identity":1304,"label":1305,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1306,"versions":1307,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1309},"package:pypi:pandas","pandas-e8d52445","pypi:pandas","pandas",[344],[1308],"2.3.3",[54],{"id":1311,"slug":1312,"identity":1313,"label":1314,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1315,"versions":1316,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1318},"package:pypi:pdftext","pdftext-f30905cf","pypi:pdftext","pdftext",[280],[1317],"0.6.3",[54],{"id":1320,"slug":1321,"identity":1322,"label":1323,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1324,"versions":1325,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1327},"package:pypi:pikepdf","pikepdf-9b0a0b6c","pypi:pikepdf","pikepdf",[519],[1326],"10.0.2",[54],{"id":1329,"slug":1330,"identity":1331,"label":1332,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1333,"versions":1334,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1336},"package:pypi:platformdirs","platformdirs-e64002f0","pypi:platformdirs","platformdirs",[305],[1335],"4.5.0",[54],{"id":1338,"slug":1339,"identity":1340,"label":1341,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1342,"versions":1343,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1345},"package:pypi:pre-commit","pre-commit-6a196b54","pypi:pre-commit","pre-commit",[305],[1344],"4.4.0",[54],{"id":1347,"slug":1348,"identity":1349,"label":1350,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1351,"versions":1352,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1354},"package:pypi:propcache","propcache-1fcd6be4","pypi:propcache","propcache",[280],[1353],"0.4.1",[54],{"id":1356,"slug":1357,"identity":1358,"label":1359,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1360,"versions":1361,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1362},"package:pypi:pyasn1-modules","pyasn1-modules-6a7471e8","pypi:pyasn1-modules","pyasn1-modules",[344],[993],[54],{"id":1364,"slug":1365,"identity":1366,"label":1367,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1368,"versions":1369,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1371},"package:pypi:pydantic","pydantic-4ac148ca","pypi:pydantic","pydantic",[305],[1370],"2.12.4",[54],{"id":1373,"slug":1374,"identity":1375,"label":1376,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1377,"versions":1378,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1380},"package:pypi:pydantic-core","pydantic-core-f9814ebc","pypi:pydantic-core","pydantic-core",[305],[1379],"2.41.5",[54],{"id":1382,"slug":1383,"identity":1384,"label":1385,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1386,"versions":1387,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1389},"package:pypi:pypdfium2","pypdfium2-940917eb","pypi:pypdfium2","pypdfium2",[344],[1388],"4.30.0",[54],{"id":1391,"slug":1392,"identity":1393,"label":1394,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1395,"versions":1396,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1398},"package:pypi:python-dateutil","python-dateutil-8eac96b7","pypi:python-dateutil","python-dateutil",[344],[1397],"2.9.0.post0",[54],{"id":1400,"slug":1401,"identity":1402,"label":1403,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1404,"versions":1405,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1407},"package:pypi:pytz","pytz-cbf1d95c","pypi:pytz","pytz",[305],[1406],"2025.2",[54],{"id":1409,"slug":1410,"identity":1411,"label":1412,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1413,"versions":1414,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1416},"package:pypi:pyyaml","pyyaml-16000901","pypi:pyyaml","pyyaml",[305],[1415],"6.0.3",[54],{"id":1418,"slug":1419,"identity":1420,"label":1421,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1422,"versions":1423,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1425},"package:pypi:rapidfuzz","rapidfuzz-3beab87b","pypi:rapidfuzz","rapidfuzz",[305],[1424],"3.14.3",[54],{"id":1427,"slug":1428,"identity":1429,"label":1430,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1431,"versions":1433,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1435},"package:pypi:regex","regex-5e8be65e","pypi:regex","regex",[1432,344],"Apache-2.0 AND CNRI-Python",[1434],"2024.11.6",[54],{"id":1437,"slug":1438,"identity":1439,"label":1440,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1441,"versions":1442,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1444},"package:pypi:rich","rich-23b343f7","pypi:rich","rich",[305],[1443],"14.2.0",[54],{"id":1446,"slug":1447,"identity":1448,"label":1449,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1450,"versions":1451,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1453},"package:pypi:rsa","rsa-1037e3e0","pypi:rsa","rsa",[280],[1452],"4.9.1",[54],{"id":1455,"slug":1456,"identity":1457,"label":1458,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1459,"versions":1460,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1462},"package:pypi:safetensors","safetensors-2a32c77a","pypi:safetensors","safetensors",[344],[1461],"0.6.2",[54],{"id":1464,"slug":1465,"identity":1466,"label":1467,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1468,"versions":1469,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1471},"package:pypi:scipy","scipy-215f884d","pypi:scipy","scipy",[344],[1470],"1.16.3",[54],{"id":1473,"slug":1474,"identity":1475,"label":1476,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1477,"versions":1478,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1480},"package:pypi:six","six-3c3888bd","pypi:six","six",[305],[1479],"1.17.0",[54],{"id":1482,"slug":1483,"identity":1484,"label":1485,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1486,"versions":1487,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1488},"package:pypi:sniffio","sniffio-83f32c9d","pypi:sniffio","sniffio",[583],[777],[54],{"id":1490,"slug":1491,"identity":1492,"label":1493,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1494,"versions":1495,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1497},"package:pypi:sqlalchemy","sqlalchemy-5de7c53b","pypi:sqlalchemy","sqlalchemy",[305],[1496],"2.0.44",[54],{"id":1499,"slug":1500,"identity":1501,"label":1502,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1503,"versions":1504,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1506},"package:pypi:standardwebhooks","standardwebhooks-9da13670","pypi:standardwebhooks","standardwebhooks",[305],[1505],"1.0.0",[54],{"id":1508,"slug":1509,"identity":1510,"label":1511,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1512,"versions":1513,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1515},"package:pypi:surya-ocr","surya-ocr-8616b94f","pypi:surya-ocr","surya-ocr",[1037],[1514],"0.17.0",[54],{"id":1517,"slug":1518,"identity":1519,"label":1520,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1521,"versions":1522,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1524},"package:pypi:sympy","sympy-b30cb89e","pypi:sympy","sympy",[344],[1523],"1.14.0",[54],{"id":1526,"slug":1527,"identity":1528,"label":1529,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1530,"versions":1531,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1533},"package:pypi:tenacity","tenacity-415454f8","pypi:tenacity","tenacity",[280],[1532],"9.1.2",[54],{"id":1535,"slug":1536,"identity":1537,"label":1538,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1539,"versions":1540,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1542},"package:pypi:threadpoolctl","threadpoolctl-e94f6300","pypi:threadpoolctl","threadpoolctl",[292],[1541],"3.6.0",[54],{"id":1544,"slug":1545,"identity":1546,"label":1547,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1548,"versions":1549,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1551},"package:pypi:triton","triton-601ea838","pypi:triton","triton",[305],[1550],"3.5.1",[54],{"id":1553,"slug":1554,"identity":1555,"label":1556,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1557,"versions":1558,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1560},"package:pypi:types-deprecated","types-deprecated-ad3f077c","pypi:types-deprecated","types-deprecated",[280],[1559],"1.3.1.20251101",[54],{"id":1562,"slug":1563,"identity":1564,"label":1565,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1566,"versions":1567,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1569},"package:pypi:types-python-dateutil","types-python-dateutil-7c72d321","pypi:types-python-dateutil","types-python-dateutil",[280],[1568],"2.9.0.20251115",[54],{"id":1571,"slug":1572,"identity":1573,"label":1574,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1575,"versions":1576,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1578},"package:pypi:typing-extensions","typing-extensions-87d153eb","pypi:typing-extensions","typing-extensions",[649,344],[1577],"4.15.0",[54],{"id":1580,"slug":1581,"identity":1582,"label":1583,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1584,"versions":1585,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1587},"package:pypi:typing-inspect","typing-inspect-bffee874","pypi:typing-inspect","typing-inspect",[305],[1586],"0.9.0",[54],{"id":1589,"slug":1590,"identity":1591,"label":1592,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1593,"versions":1594,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1595},"package:pypi:typing-inspection","typing-inspection-0abeb500","pypi:typing-inspection","typing-inspection",[305],[993],[54],{"id":1597,"slug":1598,"identity":1599,"label":1600,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1601,"versions":1602,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1603},"package:pypi:tzdata","tzdata-f80b3bb7","pypi:tzdata","tzdata",[280],[1406],[54],{"id":1605,"slug":1606,"identity":1607,"label":1608,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1609,"versions":1610,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1612},"package:pypi:wcwidth","wcwidth-038a8957","pypi:wcwidth","wcwidth",[305],[1611],"0.2.14",[54],{"id":1614,"slug":1615,"identity":1616,"label":1617,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1618,"versions":1619,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1621},"package:pypi:websockets","websockets-047236a0","pypi:websockets","websockets",[292],[1620],"15.0.1",[54],{"id":1623,"slug":1624,"identity":1625,"label":1626,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1627,"versions":1628,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1630},"package:pypi:wrapt","wrapt-505c01f2","pypi:wrapt","wrapt",[344],[1629],"2.0.1",[54],{"id":1632,"slug":1633,"identity":1634,"label":1635,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1636,"versions":1637,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1638},"package:pypi:xxhash","xxhash-908d556a","pypi:xxhash","xxhash",[443,344],[1541],[54],{"id":1640,"slug":1641,"identity":1642,"label":1643,"aiRelevant":45,"provider":289,"advisoryCount":37,"licenseExpressions":1644,"versions":1645,"dossier":45,"occurrenceCount":32,"directOccurrenceCount":37,"evidenceFiles":1647},"package:pypi:yarl","yarl-05cd1b35","pypi:yarl","yarl",[280],[1646],"1.22.0",[54],[1649,1688,1721,1753,1778,1804,1836,1879,1906,1932,1955,1982,2016,2052,2078,2098,2116,2142,2171,2189,2227,2253,2278,2311,2334,2370,2400,2423,2446,2476,2503,2522,2576,2603,2628,2651,2678,2700,2723,2746,2772,2795,2834,2863,2884,2919,2958,2981,3013,3036,3061,3085,3108,3142,3168,3198,3218,3243,3275,3328,3360,3390,3422,3455,3476,3514,3538,3566,3589,3608,3641,3666,3694,3717,3740,3768,3795,3829,3863,3890,3912,3934,3955,3975,4010,4040,4073,4096,4123,4148,4177,4224,4247,4271,4290,4312,4342,4370,4395,4418,4440,4469,4491,4518,4543,4567,4591,4617,4639,4665,4685,4721,4753,4780,4802,4829,4857,4884,4898,4928,4960,4988,5016,5044,5071,5094,5124,5176,5199,5224,5256,5275,5303,5324,5349,5369,5386,5405,5422,5443,5459,5474,5491,5506,5523,5540,5557,5570,5583,5596,5609,5622,5635,5648,5661,5683,5696,5727,5756,5770],{"id":103,"slug":1650,"dossier":45,"summary":1651,"aliases":1652,"sourceIds":1655,"published":1656,"modified":1657,"checkedAt":7,"severity":1658,"references":1662,"versionKeys":1686,"packageCount":32,"repositoryCount":32},"ghsa-248v-346w-9cwc-8a7dbdf1","Certifi removes GLOBALTRUST root certificate",[1653,1654],"CVE-2024-39689","PYSEC-2024-230",[103,1654],"2024-07-05T19:15:10Z","2026-06-10T17:14:18.786020835Z",[1659],{"type":1660,"score":1661},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[1663,1666,1668,1671,1674,1677,1680,1682,1684],{"type":1664,"url":1665},"ADVISORY","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fsecurity\u002Fadvisories\u002FGHSA-248v-346w-9cwc",{"type":1664,"url":1667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-39689",{"type":1669,"url":1670},"FIX","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi\u002Fcommit\u002Fbd8153872e9c6fc98f4023df9c2deaffea2fa463",{"type":1672,"url":1673},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fcertifi\u002Fpython-certifi",{"type":1675,"url":1676},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcertifi\u002FPYSEC-2024-230.yaml",{"type":1678,"url":1679},"ARTICLE","https:\u002F\u002Fgroups.google.com\u002Fa\u002Fmozilla.org\u002Fg\u002Fdev-security-policy\u002Fc\u002FXpknYMPO8dI",{"type":1675,"url":1681},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001",{"type":1664,"url":1683},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0001\u002F",{"type":1664,"url":1685},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-248v-346w-9cwc",[1687],"pypi:certifi@2024.6.2",{"id":104,"slug":1689,"dossier":45,"summary":1690,"aliases":1691,"sourceIds":1694,"published":1695,"modified":1696,"checkedAt":7,"severity":1697,"references":1700,"versionKeys":1712,"packageCount":32,"repositoryCount":1720},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[1692,1693],"CVE-2026-4372","PYSEC-2026-2289",[104,1693],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[1698],{"type":1660,"score":1699},"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1701,1703,1705,1707,1710],{"type":1664,"url":1702},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":1669,"url":1704},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":1672,"url":1706},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":1708,"url":1709},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":1664,"url":1711},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[1713,1714,1715,1716,1717,1718,1719],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",8,{"id":105,"slug":1722,"dossier":45,"summary":1723,"aliases":1724,"sourceIds":1727,"published":1728,"modified":1729,"checkedAt":7,"severity":1730,"references":1736,"versionKeys":1743,"packageCount":32,"repositoryCount":1752},"ghsa-2fqr-mr3j-6wp8-5ee7c60f","aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence",[1725,1726],"CVE-2026-54279","PYSEC-2026-2112",[105,1726],"2026-06-15T20:08:51Z","2026-07-13T07:26:35.059071977Z",[1731,1734],{"type":1732,"score":1733},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:L\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1735},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1737,1739,1741],{"type":1664,"url":1738},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2fqr-mr3j-6wp8",{"type":1672,"url":1740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp",{"type":1669,"url":1742},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa329a7aacad5284f087af36103aff778746da0f2",[1744,1745,1746,1747,1748,1749,1750,1751],"pypi:aiohttp@3.10.11","pypi:aiohttp@3.11.11","pypi:aiohttp@3.11.18","pypi:aiohttp@3.12.13","pypi:aiohttp@3.12.15","pypi:aiohttp@3.13.1","pypi:aiohttp@3.13.2","pypi:aiohttp@3.13.3",9,{"id":106,"slug":1754,"dossier":45,"summary":1755,"aliases":1756,"sourceIds":1759,"published":1760,"modified":1761,"checkedAt":7,"severity":1762,"references":1767,"versionKeys":1777,"packageCount":32,"repositoryCount":1752},"ghsa-2vrm-gr82-f7m5-5092ea0c","AIOHTTP has CRLF injection through multipart part content type header construction",[1757,1758],"CVE-2026-34514","PYSEC-2026-2096",[106,1758],"2026-04-01T21:16:59.417Z","2026-07-13T07:26:28.471600737Z",[1763,1765],{"type":1732,"score":1764},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1766},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",[1768,1770,1772,1774,1775],{"type":1669,"url":1769},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-2vrm-gr82-f7m5",{"type":1664,"url":1771},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34514",{"type":1669,"url":1773},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06",{"type":1672,"url":1740},{"type":1664,"url":1776},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.13.4",[1744,1745,1746,1747,1748,1749,1750,1751],{"id":107,"slug":1779,"dossier":45,"summary":1780,"aliases":1781,"sourceIds":1784,"published":1785,"modified":1786,"checkedAt":7,"severity":1787,"references":1789,"versionKeys":1800,"packageCount":32,"repositoryCount":34},"ghsa-2wc2-fm75-p42x-9941d681","Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists",[1782,1783],"CVE-2026-49476","PYSEC-2026-3071",[107,1783],"2026-07-09T13:37:40Z","2026-07-13T16:43:32.898354818Z",[1788],{"type":1660,"score":1735},[1790,1792,1794,1796,1798],{"type":1675,"url":1791},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1672,"url":1793},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve",{"type":1672,"url":1795},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsoupsieve",{"type":1664,"url":1797},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wc2-fm75-p42x",{"type":1664,"url":1799},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49476",[1801,1802,1803],"pypi:soupsieve@2.6","pypi:soupsieve@2.7","pypi:soupsieve@2.8",{"id":108,"slug":1805,"dossier":89,"summary":1806,"aliases":1807,"sourceIds":1810,"published":1811,"modified":1812,"checkedAt":7,"severity":1813,"references":1816,"versionKeys":1829,"packageCount":32,"repositoryCount":1835},"ghsa-2xpw-w6gg-jr37-91cead57","urllib3 streaming API improperly handles highly compressed data",[1808,1809],"CVE-2025-66471","PYSEC-2026-1994",[108,1809],"2025-12-05T18:15:54Z","2026-07-07T17:56:33.872074196Z",[1814],{"type":1732,"score":1815},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:H",[1817,1819,1821,1823,1825,1827],{"type":1675,"url":1818},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",{"type":1664,"url":1820},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66471",{"type":1669,"url":1822},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Fc19571de34c47de3a766541b041637ba5f716ed7",{"type":1672,"url":1824},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3",{"type":1672,"url":1826},"https:\u002F\u002Fpypi.org\u002Fproject\u002Furllib3",{"type":1664,"url":1828},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2xpw-w6gg-jr37",[1830,1831,1832,1833,1834],"pypi:urllib3@2.2.2","pypi:urllib3@2.2.3","pypi:urllib3@2.3.0","pypi:urllib3@2.4.0","pypi:urllib3@2.5.0",13,{"id":109,"slug":1837,"dossier":45,"summary":1838,"aliases":1839,"sourceIds":1843,"published":1844,"modified":1845,"checkedAt":7,"severity":1846,"references":1853,"versionKeys":1875,"packageCount":32,"repositoryCount":461},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[1840,1841,1842],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[109,1842],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[1847,1849,1851],{"type":1660,"score":1848},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":1732,"score":1850},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1660,"score":1852},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[1854,1856,1859,1861,1863,1865,1867,1869,1871,1873],{"type":1664,"url":1855},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":1857,"url":1858},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":1857,"url":1860},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":1675,"url":1862},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":1672,"url":1864},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":1675,"url":1866},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":1857,"url":1868},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":1664,"url":1870},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":1664,"url":1872},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":1664,"url":1874},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[1876,1877,1878],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":110,"slug":1880,"dossier":45,"summary":1881,"aliases":1882,"sourceIds":1885,"published":1886,"modified":1887,"checkedAt":7,"severity":1888,"references":1891,"versionKeys":1905,"packageCount":32,"repositoryCount":480},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[1883,1884],"CVE-2025-3933","PYSEC-2026-1977",[110,1884],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[1889],{"type":1660,"score":1890},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[1892,1894,1896,1898,1899,1901,1903],{"type":1664,"url":1893},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":1675,"url":1895},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":1675,"url":1897},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":1672,"url":1706},{"type":1675,"url":1900},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":1672,"url":1902},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":1664,"url":1904},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[1713,1714],{"id":111,"slug":1907,"dossier":89,"summary":1908,"aliases":1909,"sourceIds":1912,"published":1913,"modified":1914,"checkedAt":7,"severity":1915,"references":1918,"versionKeys":1931,"packageCount":32,"repositoryCount":1835},"ghsa-38jv-5279-wg99-c9df8f7b","Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)",[1910,1911],"CVE-2026-21441","PYSEC-2026-1996",[111,1911],"2026-01-07T19:18:14Z","2026-07-07T17:56:31.346111893Z",[1916,1917],{"type":1660,"score":1735},{"type":1732,"score":1815},[1919,1921,1923,1925,1926,1928,1929],{"type":1675,"url":1920},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-38jv-5279-wg99",{"type":1664,"url":1922},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-21441",{"type":1669,"url":1924},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F8864ac407bba8607950025e0979c4c69bc7abc7b",{"type":1672,"url":1824},{"type":1675,"url":1927},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F01\u002Fmsg00017.html",{"type":1672,"url":1826},{"type":1664,"url":1930},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-38jv-5279-wg99",[1830,1831,1832,1833,1834],{"id":112,"slug":1933,"dossier":45,"summary":1934,"aliases":1935,"sourceIds":1938,"published":1939,"modified":1940,"checkedAt":7,"severity":1941,"references":1945,"versionKeys":1954,"packageCount":32,"repositoryCount":1752},"ghsa-3wq7-rqq7-wx6j-29b8d785","AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS",[1936,1937],"CVE-2026-34517","PYSEC-2026-2099",[112,1937],"2026-04-01T21:16:59.870Z","2026-07-13T07:26:13.561233517Z",[1942,1944],{"type":1732,"score":1943},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1890},[1946,1948,1950,1952,1953],{"type":1669,"url":1947},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-3wq7-rqq7-wx6j",{"type":1664,"url":1949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34517",{"type":1669,"url":1951},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fcbb774f38330563422ca0c413a71021d7b944145",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":113,"slug":1956,"dossier":45,"summary":1957,"aliases":1958,"sourceIds":1961,"published":1962,"modified":1963,"checkedAt":7,"severity":1964,"references":1966,"versionKeys":1979,"packageCount":32,"repositoryCount":480},"ghsa-428g-f7cq-pgp5-bfab95ee","Marshmallow has DoS in Schema.load(many)",[1959,1960],"CVE-2025-68480","PYSEC-2026-1605",[113,1960],"2025-12-22T20:20:07Z","2026-07-07T17:56:15.810789183Z",[1965],{"type":1660,"score":1890},[1967,1969,1971,1973,1975,1977],{"type":1675,"url":1968},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fsecurity\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",{"type":1664,"url":1970},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68480",{"type":1675,"url":1972},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow\u002Fcommit\u002Fd24a0c9df061c4daa92f71cf85aca25b83eee508",{"type":1672,"url":1974},"https:\u002F\u002Fgithub.com\u002Fmarshmallow-code\u002Fmarshmallow",{"type":1672,"url":1976},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fmarshmallow",{"type":1664,"url":1978},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-428g-f7cq-pgp5",[1980,1981],"pypi:marshmallow@3.24.2","pypi:marshmallow@3.26.1",{"id":114,"slug":1983,"dossier":89,"summary":1984,"aliases":1985,"sourceIds":1989,"published":1990,"modified":1991,"checkedAt":7,"severity":1992,"references":1994,"versionKeys":2007,"packageCount":32,"repositoryCount":1835},"ghsa-45hq-cxwh-f6vc-d18d2872","Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading",[1986,1987,1988],"BIT-pillow-2026-55379","CVE-2026-55379","PYSEC-2026-2255",[114,1988],"2026-07-06T19:17:08.577Z","2026-07-22T02:59:39.058744123Z",[1993],{"type":1660,"score":1735},[1995,1997,1999,2001,2003,2005],{"type":1708,"url":1996},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-45hq-cxwh-f6vc",{"type":1664,"url":1998},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55379",{"type":1669,"url":2000},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F0a263e6264aa5399988d9acd3bbfbca2ca3ec77d",{"type":1675,"url":2002},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2255.yaml",{"type":1672,"url":2004},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow",{"type":1664,"url":2006},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fblob\u002Fmain\u002Fdocs\u002Freleasenotes\u002F12.3.0.rst",[2008,2009,2010,2011,2012,2013,2014,2015],"pypi:pillow@10.3.0","pypi:pillow@10.4.0","pypi:pillow@11.1.0","pypi:pillow@11.2.1","pypi:pillow@11.3.0","pypi:pillow@12.0.0","pypi:pillow@12.1.0","pypi:pillow@12.1.1",{"id":115,"slug":2017,"dossier":45,"summary":2018,"aliases":2019,"sourceIds":2022,"published":2023,"modified":2024,"checkedAt":7,"severity":2025,"references":2028,"versionKeys":2049,"packageCount":32,"repositoryCount":461},"ghsa-469j-vmhf-r6v7-df07d853","NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite",[2020,2021],"CVE-2026-33236","PYSEC-2026-2237",[115,2021],"2026-03-19T12:42:42Z","2026-07-13T07:26:54.270611709Z",[2026],{"type":1660,"score":2027},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[2029,2031,2033,2035,2037,2039,2041,2043,2045,2047],{"type":1708,"url":2030},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-469j-vmhf-r6v7",{"type":1664,"url":2032},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33236",{"type":1669,"url":2034},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F89fe2ec2c6bae6e2e7a46dad65cc34231976ed8a",{"type":1672,"url":2036},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk",{"type":1675,"url":2038},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33236",{"type":1675,"url":2040},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33236.json",{"type":1664,"url":2042},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:10184",{"type":1664,"url":2044},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19712",{"type":1664,"url":2046},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":1857,"url":2048},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449824",[2050,2051],"pypi:nltk@3.9.1","pypi:nltk@3.9.2",{"id":116,"slug":2053,"dossier":45,"summary":2054,"aliases":2055,"sourceIds":2058,"published":2059,"modified":2060,"checkedAt":7,"severity":2061,"references":2064,"versionKeys":2077,"packageCount":32,"repositoryCount":431},"ghsa-48p4-8xcf-vxj5-13f12656","urllib3 does not control redirects in browsers and Node.js",[2056,2057],"CVE-2025-50182","PYSEC-2026-1997",[116,2057],"2025-06-18T17:50:11Z","2026-07-07T17:57:08.881416805Z",[2062],{"type":1660,"score":2063},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2065,2067,2069,2071,2072,2074,2075],{"type":1675,"url":2066},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",{"type":1664,"url":2068},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50182",{"type":1669,"url":2070},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f",{"type":1672,"url":1824},{"type":1675,"url":2073},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Freleases\u002Ftag\u002F2.5.0",{"type":1672,"url":1826},{"type":1664,"url":2076},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-48p4-8xcf-vxj5",[1830,1831,1832,1833],{"id":117,"slug":2079,"dossier":45,"summary":2080,"aliases":2081,"sourceIds":2084,"published":2085,"modified":2086,"checkedAt":7,"severity":2087,"references":2091,"versionKeys":2097,"packageCount":32,"repositoryCount":1752},"ghsa-4fvr-rgm6-gqmc-c8b35c87","aiohttp: HTTP\u002F1 Pipelined Requests Queue Without Limit",[2082,2083],"CVE-2026-54273","PYSEC-2026-2107",[117,2083],"2026-06-15T20:10:32Z","2026-07-13T07:26:17.316378610Z",[2088,2090],{"type":1732,"score":2089},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1735},[2092,2094,2096],{"type":1664,"url":2093},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4fvr-rgm6-gqmc",{"type":1669,"url":2095},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdfdfa9d5aad5d21f91c79fb2ceeba0f8046cb6cf",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":118,"slug":2099,"dossier":45,"summary":2100,"aliases":2101,"sourceIds":2104,"published":2105,"modified":2106,"checkedAt":7,"severity":2107,"references":2111,"versionKeys":2115,"packageCount":32,"repositoryCount":1752},"ghsa-4m7w-qmgq-4wj5-f98433d3","aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections",[2102,2103],"CVE-2026-54275","PYSEC-2026-237",[118,2103],"2026-06-15T20:11:13Z","2026-06-27T11:26:29.646102490Z",[2108,2110],{"type":1732,"score":2109},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1735},[2112,2114],{"type":1664,"url":2113},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-4m7w-qmgq-4wj5",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":119,"slug":2117,"dossier":45,"summary":2118,"aliases":2119,"sourceIds":2122,"published":2123,"modified":2124,"checkedAt":7,"severity":2125,"references":2128,"versionKeys":2141,"packageCount":32,"repositoryCount":480},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[2120,2121],"CVE-2025-6921","PYSEC-2026-1980",[119,2121],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[2126],{"type":1660,"score":2127},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[2129,2131,2133,2135,2136,2138,2139],{"type":1664,"url":2130},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":1675,"url":2132},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":1675,"url":2134},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":1672,"url":1706},{"type":1675,"url":2137},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":1672,"url":1902},{"type":1664,"url":2140},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[1713,1714],{"id":120,"slug":2143,"dossier":89,"summary":2144,"aliases":2145,"sourceIds":2149,"published":2150,"modified":2151,"checkedAt":7,"severity":2152,"references":2155,"versionKeys":2170,"packageCount":32,"repositoryCount":1835},"ghsa-4x4j-2g7c-83w6-326c14d2","Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path",[2146,2147,2148],"BIT-pillow-2026-55798","CVE-2026-55798","PYSEC-2026-2257",[120,2148],"2026-07-06T19:17:08.830Z","2026-07-22T02:59:40.755856576Z",[2153],{"type":1660,"score":2154},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2156,2158,2160,2162,2164,2166,2168,2169],{"type":1708,"url":2157},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-4x4j-2g7c-83w6",{"type":1664,"url":2159},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55798",{"type":1669,"url":2161},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F8404ea5fe5df40fc34aa1e51403dd6fce0778b8a",{"type":1669,"url":2163},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F88194166691b7b603529b8b036ab3ab9cedd2de4",{"type":1669,"url":2165},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fb0e06caa64c1405aa3da0bb1d2bd9a77ca22de7f",{"type":1675,"url":2167},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2257.yaml",{"type":1672,"url":2004},{"type":1664,"url":2006},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":121,"slug":2172,"dossier":45,"summary":2173,"aliases":2174,"sourceIds":2176,"published":2177,"modified":2178,"checkedAt":7,"severity":2179,"references":2182,"versionKeys":2187,"packageCount":32,"repositoryCount":480},"ghsa-4xgf-cpjx-pc3j-c1284f87","pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size",[2175],"CVE-2026-58203",[121],"2026-06-19T22:10:42Z","2026-07-08T08:12:48.604645024Z",[2180],{"type":1660,"score":2181},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2183,2185],{"type":1675,"url":2184},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings\u002Fsecurity\u002Fadvisories\u002FGHSA-4xgf-cpjx-pc3j",{"type":1672,"url":2186},"https:\u002F\u002Fgithub.com\u002Fpydantic\u002Fpydantic-settings",[2188],"pypi:pydantic-settings@2.12.0",{"id":122,"slug":2190,"dossier":89,"summary":2191,"aliases":2192,"sourceIds":2195,"published":2196,"modified":2197,"checkedAt":7,"severity":2198,"references":2201,"versionKeys":2224,"packageCount":32,"repositoryCount":1835},"ghsa-5239-wwwm-4pmq-228840e4","Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",[2193,2194],"CVE-2026-4539","PYSEC-2026-2987",[122,2194],"2026-03-22T06:30:15Z","2026-07-13T16:42:36.989801915Z",[2199,2200],{"type":1660,"score":1848},{"type":1732,"score":1850},[2202,2204,2206,2208,2210,2212,2214,2216,2218,2220,2222],{"type":1664,"url":2203},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4539",{"type":1675,"url":2205},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fissues\u002F3058",{"type":1675,"url":2207},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fpull\u002F3064",{"type":1675,"url":2209},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Fcommit\u002F24b8aa76c6cd6d70f39c6dd605cce319c98e2ccc",{"type":1672,"url":2211},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments",{"type":1675,"url":2213},"https:\u002F\u002Fgithub.com\u002Fpygments\u002Fpygments\u002Freleases\u002Ftag\u002F2.20.0",{"type":1675,"url":2215},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352327",{"type":1675,"url":2217},"https:\u002F\u002Fvuldb.com\u002F?id.352327",{"type":1675,"url":2219},"https:\u002F\u002Fvuldb.com\u002F?submit.774685",{"type":1672,"url":2221},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpygments",{"type":1664,"url":2223},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5239-wwwm-4pmq",[2225,2226],"pypi:pygments@2.19.1","pypi:pygments@2.19.2",{"id":123,"slug":2228,"dossier":45,"summary":2229,"aliases":2230,"sourceIds":2234,"published":2235,"modified":2236,"checkedAt":7,"severity":2237,"references":2242,"versionKeys":2252,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[2231,2232,2233],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[123,2233],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[2238,2240],{"type":1732,"score":2239},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1660,"score":2241},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2243,2245,2247,2249,2251],{"type":1664,"url":2244},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":1664,"url":2246},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":1675,"url":2248},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":1675,"url":2250},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":1672,"url":1864},[1876],{"id":124,"slug":2254,"dossier":45,"summary":2255,"aliases":2256,"sourceIds":2259,"published":2260,"modified":2261,"checkedAt":7,"severity":2262,"references":2265,"versionKeys":2277,"packageCount":32,"repositoryCount":431},"ghsa-54jq-c3m8-4m76-bba4b2d3","AIOHTTP vulnerable to brute-force leak of internal static file path components",[2257,2258],"CVE-2025-69226","PYSEC-2026-1097",[124,2258],"2026-01-05T23:09:51Z","2026-07-07T17:57:12.462419549Z",[2263],{"type":1732,"score":2264},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[2266,2268,2270,2272,2273,2275],{"type":1675,"url":2267},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",{"type":1664,"url":2269},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69226",{"type":1669,"url":2271},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff2a86fd5ac0383000d1715afddfa704413f0711e",{"type":1672,"url":1740},{"type":1672,"url":2274},"https:\u002F\u002Fpypi.org\u002Fproject\u002Faiohttp",{"type":1664,"url":2276},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-54jq-c3m8-4m76",[1744,1745,1746,1747,1748,1749,1750],{"id":125,"slug":2279,"dossier":45,"summary":2280,"aliases":2281,"sourceIds":2285,"published":2286,"modified":2287,"checkedAt":7,"severity":2288,"references":2291,"versionKeys":2306,"packageCount":32,"repositoryCount":64},"ghsa-597g-3phw-6986-6d75801e","virtualenv Has TOCTOU Vulnerabilities in Directory Creation",[2282,2283,2284],"BIT-virtualenv-2026-22702","CVE-2026-22702","PYSEC-2026-2009",[125,2284],"2026-01-13T18:45:57Z","2026-07-07T17:57:28.238961214Z",[2289],{"type":1660,"score":2290},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",[2292,2294,2296,2298,2300,2302,2304],{"type":1675,"url":2293},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fsecurity\u002Fadvisories\u002FGHSA-597g-3phw-6986",{"type":1664,"url":2295},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22702",{"type":1675,"url":2297},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fpull\u002F3013",{"type":1669,"url":2299},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv\u002Fcommit\u002Fdec4cec5d16edaf83a00a658f32d1e032661cebc",{"type":1672,"url":2301},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fvirtualenv",{"type":1672,"url":2303},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fvirtualenv",{"type":1664,"url":2305},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-597g-3phw-6986",[2307,2308,2309,2310],"pypi:virtualenv@20.30.0","pypi:virtualenv@20.31.1","pypi:virtualenv@20.34.0","pypi:virtualenv@20.35.4",{"id":126,"slug":2312,"dossier":45,"summary":2313,"aliases":2314,"sourceIds":2317,"published":2318,"modified":2319,"checkedAt":7,"severity":2320,"references":2322,"versionKeys":2333,"packageCount":32,"repositoryCount":480},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[2315,2316],"CVE-2025-6638","PYSEC-2026-1981",[126,2316],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[2321],{"type":1660,"score":2127},[2323,2325,2326,2327,2328,2330,2331],{"type":1664,"url":2324},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":1675,"url":2132},{"type":1675,"url":2134},{"type":1672,"url":1706},{"type":1675,"url":2329},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":1672,"url":1902},{"type":1664,"url":2332},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[1713,1714],{"id":127,"slug":2335,"dossier":45,"summary":2336,"aliases":2337,"sourceIds":2341,"published":2342,"modified":2343,"checkedAt":7,"severity":2344,"references":2349,"versionKeys":2366,"packageCount":32,"repositoryCount":461},"ghsa-5rjg-fvgr-3xxf-79d39e6b","setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write",[2338,2339,2340],"BIT-setuptools-2025-47273","CVE-2025-47273","PYSEC-2025-49",[127,2340],"2025-05-17T16:15:19Z","2026-05-11T00:26:34.671259971Z",[2345,2347],{"type":1732,"score":2346},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1660,"score":2348},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2350,2352,2354,2356,2358,2360,2362,2364],{"type":1708,"url":2351},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-5rjg-fvgr-3xxf",{"type":1664,"url":2353},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-47273",{"type":1857,"url":2355},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fissues\u002F4946",{"type":1669,"url":2357},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F250a6d17978f9f6ac3ac887091f2d32886fbbb0b",{"type":1675,"url":2359},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2025-49.yaml",{"type":1672,"url":2361},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools",{"type":1675,"url":2363},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fblob\u002F6ead555c5fb29bc57fe6105b1bffc163f56fd558\u002Fsetuptools\u002Fpackage_index.py#L810C1-L825C88",{"type":1678,"url":2365},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F05\u002Fmsg00035.html",[2367,2368,2369],"pypi:setuptools@69.2.0","pypi:setuptools@72.2.0","pypi:setuptools@75.8.0",{"id":128,"slug":2371,"dossier":45,"summary":2372,"aliases":2373,"sourceIds":2376,"published":2377,"modified":2378,"checkedAt":7,"severity":2379,"references":2383,"versionKeys":2398,"packageCount":32,"repositoryCount":480},"ghsa-5wmx-573v-2qwq-3c948197","Python-Markdown has an Uncaught Exception",[2374,2375],"CVE-2025-69534","PYSEC-2026-89",[128,2375],"2026-03-05T15:16:11.243Z","2026-06-10T17:02:03.742572395Z",[2380,2381],{"type":1660,"score":1735},{"type":1732,"score":2382},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[2384,2386,2388,2390,2392,2394,2396],{"type":1664,"url":2385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69534",{"type":1857,"url":2387},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fissues\u002F1534",{"type":1675,"url":2389},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Fpull\u002F1535",{"type":1672,"url":2391},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown",{"type":1675,"url":2393},"https:\u002F\u002Fgithub.com\u002FPython-Markdown\u002Fmarkdown\u002Factions\u002Fruns\u002F15736122892",{"type":1675,"url":2395},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fmarkdown\u002FPYSEC-2026-89.yaml",{"type":1664,"url":2397},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5wmx-573v-2qwq",[2399],"pypi:markdown@3.8",{"id":129,"slug":2401,"dossier":89,"summary":2402,"aliases":2403,"sourceIds":2407,"published":2408,"modified":2409,"checkedAt":7,"severity":2410,"references":2412,"versionKeys":2422,"packageCount":32,"repositoryCount":1835},"ghsa-5x94-69rx-g8h2-0bc05f88","Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`",[2404,2405,2406],"BIT-pillow-2026-54060","CVE-2026-54060","PYSEC-2026-2254",[129,2406],"2026-07-06T19:17:08.270Z","2026-07-22T02:59:38.824757212Z",[2411],{"type":1660,"score":1735},[2413,2415,2417,2418,2420,2421],{"type":1708,"url":2414},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5x94-69rx-g8h2",{"type":1664,"url":2416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54060",{"type":1669,"url":2000},{"type":1675,"url":2419},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2254.yaml",{"type":1672,"url":2004},{"type":1664,"url":2006},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":130,"slug":2424,"dossier":45,"summary":2425,"aliases":2426,"sourceIds":2430,"published":2431,"modified":2432,"checkedAt":7,"severity":2433,"references":2437,"versionKeys":2445,"packageCount":32,"repositoryCount":40},"ghsa-5xmw-vc9v-4wf2-86a8861a","Pillow has a heap buffer overflow with nested list coordinates",[2427,2428,2429],"BIT-pillow-2026-42309","CVE-2026-42309","PYSEC-2026-2251",[130,2429],"2026-05-04T20:18:27Z","2026-07-13T07:26:28.768890335Z",[2434,2435],{"type":1660,"score":1852},{"type":1732,"score":2436},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2438,2440,2442,2443],{"type":1664,"url":2439},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-5xmw-vc9v-4wf2",{"type":1664,"url":2441},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42309",{"type":1672,"url":2004},{"type":1664,"url":2444},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.2.0",[2011,2012,2013,2014,2015],{"id":131,"slug":2447,"dossier":89,"summary":2448,"aliases":2449,"sourceIds":2453,"published":2454,"modified":2455,"checkedAt":7,"severity":2456,"references":2459,"versionKeys":2475,"packageCount":32,"repositoryCount":1835},"ghsa-62p4-gmf7-7g93-cb81341c","Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)",[2450,2451,2452],"BIT-pillow-2026-54058","CVE-2026-54058","PYSEC-2026-3493",[131,2452],"2026-07-20T21:08:13Z","2026-07-23T15:11:42.568996050Z",[2457],{"type":1732,"score":2458},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2460,2462,2464,2466,2468,2469,2471,2473],{"type":1675,"url":2461},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",{"type":1664,"url":2463},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54058",{"type":1675,"url":2465},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9719",{"type":1675,"url":2467},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F6a8de891fb00968e5ea79bfa84368ed90b3cfc1d",{"type":1672,"url":2004},{"type":1675,"url":2470},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F12.3.0",{"type":1672,"url":2472},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fpillow",{"type":1664,"url":2474},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-62p4-gmf7-7g93",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":132,"slug":2477,"dossier":45,"summary":2478,"aliases":2479,"sourceIds":2482,"published":2483,"modified":2484,"checkedAt":7,"severity":2485,"references":2491,"versionKeys":2502,"packageCount":32,"repositoryCount":1752},"ghsa-63hf-3vf5-4wqf-aadd9f0f","AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection\u002Fsecurity bypass",[2480,2481],"CVE-2026-34520","PYSEC-2026-2102",[132,2481],"2026-04-01T21:17:00.333Z","2026-07-15T22:00:51.319409225Z",[2486,2488,2489],{"type":1660,"score":2487},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"type":1732,"score":1764},{"type":1732,"score":2490},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2492,2494,2496,2498,2499,2500],{"type":1669,"url":2493},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hf-3vf5-4wqf",{"type":1664,"url":2495},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34520",{"type":1669,"url":2497},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F9370b9714a7a56003cacd31a9b4ae16eab109ba4",{"type":1672,"url":1740},{"type":1664,"url":1776},{"type":1675,"url":2501},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Faiohttp\u002FPYSEC-2026-2102.yaml",[1744,1745,1746,1747,1748,1749,1750,1751],{"id":133,"slug":2504,"dossier":45,"summary":2505,"aliases":2506,"sourceIds":2509,"published":2510,"modified":2511,"checkedAt":7,"severity":2512,"references":2515,"versionKeys":2521,"packageCount":32,"repositoryCount":1752},"ghsa-63hw-fmq6-xxg2-00aac622","aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines",[2507,2508],"CVE-2026-54277","PYSEC-2026-2110",[133,2508],"2026-06-15T20:09:16Z","2026-07-13T07:26:29.010491244Z",[2513,2514],{"type":1732,"score":2089},{"type":1660,"score":1735},[2516,2518,2520],{"type":1664,"url":2517},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-63hw-fmq6-xxg2",{"type":1669,"url":2519},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5ab61bb4cd88f19b712f12c7c9295fe262bf804d",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":134,"slug":2523,"dossier":45,"summary":2524,"aliases":2525,"sourceIds":2528,"published":2529,"modified":2530,"checkedAt":7,"severity":2531,"references":2533,"versionKeys":2574,"packageCount":32,"repositoryCount":431},"ghsa-63vm-454h-vhhq-296aa7fc","pyasn1 has a DoS vulnerability in decoder",[2526,2527],"CVE-2026-23490","PYSEC-2026-1810",[134,2527],"2026-01-16T19:19:25Z","2026-07-21T15:30:39.563600361Z",[2532],{"type":1660,"score":1735},[2534,2536,2538,2540,2542,2544,2546,2548,2550,2552,2554,2556,2558,2560,2562,2564,2566,2568,2570,2572],{"type":1675,"url":2535},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-63vm-454h-vhhq",{"type":1664,"url":2537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-23490",{"type":1675,"url":2539},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fbe353d755f42ea36539b4f5053c652ddf56979a6",{"type":1675,"url":2541},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F3908f144229eed4df24bd569d16e5991ace44970",{"type":1675,"url":2543},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4148",{"type":1675,"url":2545},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4147",{"type":1675,"url":2547},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4146",{"type":1675,"url":2549},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4145",{"type":1675,"url":2551},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4144",{"type":1675,"url":2553},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4143",{"type":1675,"url":2555},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4142",{"type":1675,"url":2557},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4141",{"type":1675,"url":2559},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4140",{"type":1675,"url":2561},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4139",{"type":1675,"url":2563},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4138",{"type":1675,"url":2565},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:39894",{"type":1672,"url":2567},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1",{"type":1675,"url":2569},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fblob\u002F0f07d7242a78ab4d129b26256d7474f7168cf536\u002Fpyasn1\u002Fcodec\u002Fber\u002Fdecoder.py#L496",{"type":1675,"url":2571},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.2",{"type":1675,"url":2573},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F02\u002Fmsg00002.html",[2575],"pypi:pyasn1@0.6.1",{"id":135,"slug":2577,"dossier":89,"summary":2578,"aliases":2579,"sourceIds":2582,"published":2583,"modified":2584,"checkedAt":7,"severity":2585,"references":2589,"versionKeys":2598,"packageCount":32,"repositoryCount":2602},"ghsa-65pc-fj4g-8rjx-9fe9e88a","Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",[2580,2581],"CVE-2026-45409","PYSEC-2026-215",[135,2581],"2026-05-19T14:34:32Z","2026-07-08T17:45:15.021597323Z",[2586,2587],{"type":1660,"score":1890},{"type":1732,"score":2588},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2590,2592,2594,2596],{"type":1664,"url":2591},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna\u002Fsecurity\u002Fadvisories\u002FGHSA-65pc-fj4g-8rjx",{"type":1664,"url":2593},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45409",{"type":1672,"url":2595},"https:\u002F\u002Fgithub.com\u002Fkjd\u002Fidna",{"type":1675,"url":2597},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fidna\u002FPYSEC-2026-215.yaml",[2599,2600,2601],"pypi:idna@3.10","pypi:idna@3.11","pypi:idna@3.7",17,{"id":136,"slug":2604,"dossier":45,"summary":2605,"aliases":2606,"sourceIds":2609,"published":2610,"modified":2611,"checkedAt":7,"severity":2612,"references":2617,"versionKeys":2627,"packageCount":32,"repositoryCount":461},"ghsa-68j8-pq59-fqgm-94af8991","NLTK has a Path Traversal issue",[2607,2608],"CVE-2026-0847","PYSEC-2026-98",[136,2608],"2026-03-04T19:16:10.683Z","2026-06-10T17:02:23.764228465Z",[2613,2615],{"type":1660,"score":2614},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:L",{"type":1660,"score":2616},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[2618,2620,2621,2623,2625],{"type":1664,"url":2619},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0847",{"type":1672,"url":2036},{"type":1675,"url":2622},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-98.yaml",{"type":1708,"url":2624},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffc69914f-36a9-4c18-8503-10013b39f966",{"type":1664,"url":2626},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-68j8-pq59-fqgm",[2050,2051],{"id":137,"slug":2629,"dossier":45,"summary":2630,"aliases":2631,"sourceIds":2634,"published":2635,"modified":2636,"checkedAt":7,"severity":2637,"references":2639,"versionKeys":2650,"packageCount":32,"repositoryCount":431},"ghsa-69f9-5gxw-wvc2-eec14573","AIOHTTP's unicode processing of header values could cause parsing discrepancies",[2632,2633],"CVE-2025-69224","PYSEC-2026-1099",[137,2633],"2026-01-05T22:58:57Z","2026-07-07T17:56:40.774148412Z",[2638],{"type":1732,"score":1764},[2640,2642,2644,2646,2647,2648],{"type":1675,"url":2641},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",{"type":1664,"url":2643},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69224",{"type":1669,"url":2645},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F32677f2adfd907420c078dda6b79225c6f4ebce0",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":2649},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69f9-5gxw-wvc2",[1744,1745,1746,1747,1748,1749,1750],{"id":138,"slug":2652,"dossier":45,"summary":2653,"aliases":2654,"sourceIds":2657,"published":2658,"modified":2659,"checkedAt":7,"severity":2660,"references":2665,"versionKeys":2677,"packageCount":32,"repositoryCount":1720},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[2655,2656],"CVE-2026-1839","PYSEC-2026-2288",[138,2656],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[2661,2663],{"type":1660,"score":2662},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":1660,"score":2664},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[2666,2668,2670,2671,2673,2675],{"type":1664,"url":2667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":1669,"url":2669},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":1672,"url":1706},{"type":1675,"url":2672},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":1708,"url":2674},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":1664,"url":2676},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[1713,1714,1715,1716,1717,1718,1719],{"id":139,"slug":2679,"dossier":45,"summary":2680,"aliases":2681,"sourceIds":2684,"published":2685,"modified":2686,"checkedAt":7,"severity":2687,"references":2689,"versionKeys":2699,"packageCount":32,"repositoryCount":461},"ghsa-6hm5-jgcp-p838-200e0a21","Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)",[2682,2683],"CVE-2026-12072","PYSEC-2026-3581",[139,2683],"2026-07-31T16:50:55Z","2026-08-06T15:11:53.284323541Z",[2688],{"type":1660,"score":2616},[2690,2692,2693,2695,2697],{"type":1675,"url":2691},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":1672,"url":2036},{"type":1672,"url":2694},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fnltk",{"type":1664,"url":2696},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6hm5-jgcp-p838",{"type":1664,"url":2698},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12072",[2050,2051],{"id":140,"slug":2701,"dossier":45,"summary":2702,"aliases":2703,"sourceIds":2706,"published":2707,"modified":2708,"checkedAt":7,"severity":2709,"references":2711,"versionKeys":2722,"packageCount":32,"repositoryCount":431},"ghsa-6jhg-hg63-jvvf-74cd77d8","AIOHTTP vulnerable to  denial of service through large payloads",[2704,2705],"CVE-2025-69228","PYSEC-2026-1100",[140,2705],"2026-01-05T23:13:14Z","2026-07-07T17:57:35.249454020Z",[2710],{"type":1732,"score":2089},[2712,2714,2716,2718,2719,2720],{"type":1675,"url":2713},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",{"type":1664,"url":2715},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69228",{"type":1669,"url":2717},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fb7dbd35375aedbcd712cbae8ad513d56d11cce60",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":2721},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6jhg-hg63-jvvf",[1744,1745,1746,1747,1748,1749,1750],{"id":141,"slug":2724,"dossier":45,"summary":2725,"aliases":2726,"sourceIds":2729,"published":2730,"modified":2731,"checkedAt":7,"severity":2732,"references":2734,"versionKeys":2745,"packageCount":32,"repositoryCount":431},"ghsa-6mq8-rvhq-8wgg-d94d738f","AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb",[2727,2728],"CVE-2025-69223","PYSEC-2026-1101",[141,2728],"2026-01-05T22:58:41Z","2026-07-07T17:56:11.402262091Z",[2733],{"type":1660,"score":1735},[2735,2737,2739,2741,2742,2743],{"type":1675,"url":2736},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",{"type":1664,"url":2738},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69223",{"type":1669,"url":2740},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F2b920c39002cee0ec5b402581779bbaaf7c9138a",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":2744},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6mq8-rvhq-8wgg",[1744,1745,1746,1747,1748,1749,1750],{"id":142,"slug":2747,"dossier":89,"summary":2748,"aliases":2749,"sourceIds":2753,"published":2754,"modified":2755,"checkedAt":7,"severity":2756,"references":2758,"versionKeys":2771,"packageCount":32,"repositoryCount":1835},"ghsa-6r8x-57c9-28j4-3a620dbf","Pillow: Heap out-of-bounds write `Image.paste()` \u002F `Image.crop()` via signed coordinate overflow",[2750,2751,2752],"BIT-pillow-2026-59199","CVE-2026-59199","PYSEC-2026-3451",[142,2752],"2026-07-14T16:17:01.937Z","2026-07-22T02:59:40.188047466Z",[2757],{"type":1660,"score":1735},[2759,2761,2763,2765,2767,2769,2770],{"type":1708,"url":2760},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-6r8x-57c9-28j4",{"type":1664,"url":2762},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59199",{"type":1669,"url":2764},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9703",{"type":1669,"url":2766},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fceefc348eb3c3844c7f9796ef2cc3a7dd5fbba7b",{"type":1675,"url":2768},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3451.yaml",{"type":1672,"url":2004},{"type":1664,"url":2470},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":143,"slug":2773,"dossier":45,"summary":2774,"aliases":2775,"sourceIds":2778,"published":2779,"modified":2780,"checkedAt":7,"severity":2781,"references":2783,"versionKeys":2794,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[2776,2777],"CVE-2024-12720","PYSEC-2026-1982",[143,2777],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[2782],{"type":1660,"score":2127},[2784,2786,2788,2789,2791,2792],{"type":1664,"url":2785},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":1675,"url":2787},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":1672,"url":1706},{"type":1675,"url":2790},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":1672,"url":1902},{"type":1664,"url":2793},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[1713],{"id":144,"slug":2796,"dossier":45,"summary":2797,"aliases":2798,"sourceIds":2801,"published":2802,"modified":2803,"checkedAt":7,"severity":2804,"references":2807,"versionKeys":2824,"packageCount":32,"repositoryCount":40},"ghsa-7gcm-g887-7qv7-55bb9ff1","protobuf affected by a JSON recursion depth bypass",[2799,2800],"CVE-2026-0994","PYSEC-2026-1805",[144,2800],"2026-01-23T15:31:35Z","2026-07-07T17:56:36.712428283Z",[2805],{"type":1732,"score":2806},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:L",[2808,2810,2812,2814,2816,2818,2820,2822],{"type":1664,"url":2809},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0994",{"type":1675,"url":2811},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fissues\u002F25070",{"type":1675,"url":2813},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fpull\u002F25239",{"type":1675,"url":2815},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F5ebddcb1bcbe51d1fe323baa145e85f4f23128cf",{"type":1675,"url":2817},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002Fd2b001626d137c62dfee6c88c87324102531868b",{"type":1672,"url":2819},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf",{"type":1672,"url":2821},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fprotobuf",{"type":1664,"url":2823},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7gcm-g887-7qv7",[2825,2826,2827,2828,2829,2830,2831,2832,2833],"pypi:protobuf@4.25.7","pypi:protobuf@4.25.8","pypi:protobuf@5.29.3","pypi:protobuf@5.29.4","pypi:protobuf@6.31.1","pypi:protobuf@6.32.0","pypi:protobuf@6.33.0","pypi:protobuf@6.33.1","pypi:protobuf@6.33.4",{"id":145,"slug":2835,"dossier":45,"summary":2836,"aliases":2837,"sourceIds":2840,"published":2841,"modified":2842,"checkedAt":7,"severity":2843,"references":2846,"versionKeys":2862,"packageCount":32,"repositoryCount":461},"ghsa-7p94-766c-hgjp-50b78c94","NLTK has a Zip Slip Vulnerability",[2838,2839],"CVE-2025-14009","PYSEC-2026-96",[145,2839],"2026-02-18T18:24:19.410Z","2026-06-10T17:02:23.646726882Z",[2844],{"type":1660,"score":2845},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[2847,2849,2851,2853,2854,2856,2858,2860],{"type":1664,"url":2848},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-14009",{"type":1675,"url":2850},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3468",{"type":1675,"url":2852},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1056b323af6462455571302e766b67cf300aea18",{"type":1672,"url":2036},{"type":1675,"url":2855},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fblob\u002F4154eb85e832f266660a09286c7e37e308292284\u002FChangeLog#L1",{"type":1675,"url":2857},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-96.yaml",{"type":1708,"url":2859},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F49ecbc02-054e-4470-b2e0-b267936cc4e4",{"type":1664,"url":2861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-7p94-766c-hgjp",[2050,2051],{"id":146,"slug":2864,"dossier":45,"summary":2865,"aliases":2866,"sourceIds":2869,"published":2870,"modified":2871,"checkedAt":7,"severity":2872,"references":2874,"versionKeys":2883,"packageCount":32,"repositoryCount":34},"ghsa-836r-79rf-4m37-54a23e8e","Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser",[2867,2868],"CVE-2026-49477","PYSEC-2026-3072",[146,2868],"2026-07-09T13:37:46Z","2026-07-13T16:42:45.934231028Z",[2873],{"type":1660,"score":1735},[2875,2877,2878,2879,2881],{"type":1675,"url":2876},"https:\u002F\u002Fgithub.com\u002Ffacelessuser\u002Fsoupsieve\u002Fsecurity\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1672,"url":1793},{"type":1672,"url":1795},{"type":1664,"url":2880},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-836r-79rf-4m37",{"type":1664,"url":2882},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-49477",[1801,1802,1803],{"id":147,"slug":2885,"dossier":45,"summary":2886,"aliases":2887,"sourceIds":2890,"published":2891,"modified":2892,"checkedAt":7,"severity":2893,"references":2900,"versionKeys":2918,"packageCount":32,"repositoryCount":461},"ghsa-848c-c2cx-j7qx-0ad88ce5","NLTK vulnerable to Eval Injection via collocations CLI arguments",[2888,2889],"CVE-2025-71408","PYSEC-2026-3657",[147,2889],"2026-07-24T22:16:50.063Z","2026-08-12T19:59:11.940439452Z",[2894,2896,2898],{"type":1660,"score":2895},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1732,"score":2897},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1732,"score":2899},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[2901,2903,2905,2907,2909,2910,2912,2914,2916],{"type":1664,"url":2902},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-71408",{"type":1669,"url":2904},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3465",{"type":1669,"url":2906},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F66f14096d952ec8f04934f515e027534bd4eb0ac",{"type":1675,"url":2908},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval",{"type":1672,"url":2036},{"type":1664,"url":2911},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Freleases\u002Ftag\u002F3.9.3",{"type":1675,"url":2913},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-3657.yaml",{"type":1669,"url":2915},"https:\u002F\u002Fwww.vulncheck.com\u002Fadvisories\u002Fnltk-eval-injection-via-collocations-py-command-line-arguments",{"type":1708,"url":2917},"https:\u002F\u002Faydinnyunus.github.io\u002F2026\u002F06\u002F07\u002Fcommand-injection-nltk-collocations-eval\u002F",[2050,2051],{"id":148,"slug":2920,"dossier":45,"summary":2921,"aliases":2922,"sourceIds":2926,"published":2927,"modified":2928,"checkedAt":7,"severity":2929,"references":2933,"versionKeys":2955,"packageCount":32,"repositoryCount":431},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[2923,2924,2925],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[148,2925],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[2930,2931],{"type":1660,"score":1848},{"type":1732,"score":2932},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[2934,2936,2938,2940,2942,2944,2945,2947,2949,2951,2953],{"type":1664,"url":2935},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":1675,"url":2937},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":1675,"url":2939},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":1675,"url":2941},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":1675,"url":2943},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":1672,"url":1864},{"type":1675,"url":2946},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":1675,"url":2948},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":1675,"url":2950},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":1672,"url":2952},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":1664,"url":2954},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[1876,1877,1878,2956,2957],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":149,"slug":2959,"dossier":45,"summary":2960,"aliases":2961,"sourceIds":2964,"published":2965,"modified":2966,"checkedAt":7,"severity":2967,"references":2969,"versionKeys":2979,"packageCount":32,"repositoryCount":1720},"ghsa-8ppf-4f7h-5ppj-4d7d140d","pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service",[2962,2963],"CVE-2026-59885","PYSEC-2026-3456",[149,2963],"2026-07-14T17:17:14.880Z","2026-07-23T09:29:39.188829469Z",[2968],{"type":1660,"score":1735},[2970,2972,2974,2976,2977],{"type":1664,"url":2971},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-8ppf-4f7h-5ppj",{"type":1664,"url":2973},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59885",{"type":1669,"url":2975},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F45bdb19eb7df4b3780fe9c912c63e99bffc39dd9",{"type":1672,"url":2567},{"type":1664,"url":2978},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Freleases\u002Ftag\u002Fv0.6.4",[2575,2980],"pypi:pyasn1@0.6.3",{"id":150,"slug":2982,"dossier":45,"summary":2983,"aliases":2984,"sourceIds":2987,"published":2988,"modified":2989,"checkedAt":7,"severity":2990,"references":2993,"versionKeys":3012,"packageCount":32,"repositoryCount":461},"ghsa-8qvm-5x2c-j2w7-8a075519","protobuf-python has a potential Denial of Service issue",[2985,2986],"CVE-2025-4565","PYSEC-2026-1806",[150,2986],"2025-06-16T16:02:58Z","2026-07-07T17:57:09.877491994Z",[2991],{"type":1732,"score":2992},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[2994,2996,2998,3000,3002,3003,3005,3007,3009,3010],{"type":1675,"url":2995},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-735f-pc8j-v9w8",{"type":1675,"url":2997},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fsecurity\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",{"type":1664,"url":2999},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-4565",{"type":1675,"url":3001},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fcommit\u002F17838beda2943d08b8a9d4df5b68f5f04f26d901",{"type":1672,"url":2819},{"type":1675,"url":3004},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fdecoder_test.py#L87-L98",{"type":1675,"url":3006},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Fblob\u002Fmain\u002Fpython\u002Fgoogle\u002Fprotobuf\u002Finternal\u002Fmessage_test.py#L1436-L1478",{"type":1675,"url":3008},"https:\u002F\u002Fgithub.com\u002Fprotocolbuffers\u002Fprotobuf\u002Ftree\u002Fmain\u002Fpython#implementation-backends",{"type":1672,"url":2821},{"type":1664,"url":3011},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-8qvm-5x2c-j2w7",[2825,2827,2828],{"id":151,"slug":3014,"dossier":89,"summary":3015,"aliases":3016,"sourceIds":3020,"published":3021,"modified":3022,"checkedAt":7,"severity":3023,"references":3025,"versionKeys":3035,"packageCount":32,"repositoryCount":1835},"ghsa-8v84-f9pq-wr9x-6c1b185f","Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading",[3017,3018,3019],"BIT-pillow-2026-54059","CVE-2026-54059","PYSEC-2026-2253",[151,3019],"2026-07-06T19:17:08.127Z","2026-07-22T02:59:41.148041376Z",[3024],{"type":1660,"score":1735},[3026,3028,3030,3031,3033,3034],{"type":1708,"url":3027},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-8v84-f9pq-wr9x",{"type":1664,"url":3029},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54059",{"type":1669,"url":2000},{"type":1675,"url":3032},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2253.yaml",{"type":1672,"url":2004},{"type":1664,"url":2006},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":152,"slug":3037,"dossier":45,"summary":3038,"aliases":3039,"sourceIds":3042,"published":3043,"modified":3044,"checkedAt":7,"severity":3045,"references":3047,"versionKeys":3060,"packageCount":32,"repositoryCount":480},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[3040,3041],"CVE-2025-5197","PYSEC-2026-1983",[152,3041],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[3046],{"type":1660,"score":2127},[3048,3050,3052,3054,3055,3057,3058],{"type":1664,"url":3049},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":1675,"url":3051},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":1675,"url":3053},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":1672,"url":1706},{"type":1675,"url":3056},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":1672,"url":1902},{"type":1664,"url":3059},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[1713,1714],{"id":153,"slug":3062,"dossier":45,"summary":3063,"aliases":3064,"sourceIds":3067,"published":3068,"modified":3069,"checkedAt":7,"severity":3070,"references":3073,"versionKeys":3084,"packageCount":32,"repositoryCount":34},"ghsa-9548-qrrj-x5pj-6121f213","AIOHTTP is vulnerable to HTTP Request\u002FResponse Smuggling through incorrect parsing of chunked trailer sections",[3065,3066],"CVE-2025-53643","PYSEC-2026-1104",[153,3066],"2025-07-14T19:33:31Z","2026-07-07T17:56:52.935544397Z",[3071],{"type":1732,"score":3072},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3074,3076,3078,3080,3081,3082],{"type":1675,"url":3075},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",{"type":1664,"url":3077},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-53643",{"type":1669,"url":3079},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe8d774f635dc6d1cd3174d0e38891da5de0e2b6a",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":3083},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9548-qrrj-x5pj",[1744,1745,1746,1747],{"id":154,"slug":3086,"dossier":45,"summary":3087,"aliases":3088,"sourceIds":3091,"published":3092,"modified":3093,"checkedAt":7,"severity":3094,"references":3098,"versionKeys":3107,"packageCount":32,"repositoryCount":1752},"ghsa-966j-vmvw-g2g9-dad9a989","AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect",[3089,3090],"CVE-2026-34518","PYSEC-2026-2100",[154,3090],"2026-04-01T21:17:00.020Z","2026-07-13T07:26:39.502317923Z",[3095,3097],{"type":1660,"score":3096},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"type":1732,"score":2264},[3099,3101,3103,3105,3106],{"type":1669,"url":3100},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-966j-vmvw-g2g9",{"type":1664,"url":3102},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34518",{"type":1669,"url":3104},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F5351c980dcec7ad385730efdf4e1f4338b24fdb6",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":155,"slug":3109,"dossier":45,"summary":3110,"aliases":3111,"sourceIds":3114,"published":3115,"modified":3116,"checkedAt":7,"severity":3117,"references":3120,"versionKeys":3139,"packageCount":32,"repositoryCount":431},"ghsa-9hjg-9r4m-mvj7-32d7b63e","Requests vulnerable to .netrc credentials leak via malicious URLs",[3112,3113],"CVE-2024-47081","PYSEC-2026-1872",[155,3113],"2025-06-09T19:06:08Z","2026-07-07T17:56:56.234172558Z",[3118],{"type":1660,"score":3119},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[3121,3123,3125,3127,3129,3131,3133,3135,3137],{"type":1675,"url":3122},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",{"type":1664,"url":3124},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-47081",{"type":1675,"url":3126},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6965",{"type":1669,"url":3128},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F96ba401c1296ab1dda74a2365ef36d88f7d144ef",{"type":1672,"url":3130},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests",{"type":1675,"url":3132},"https:\u002F\u002Frequests.readthedocs.io\u002Fen\u002Flatest\u002Fapi\u002F#requests.Session.trust_env",{"type":1675,"url":3134},"https:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FJun\u002F2",{"type":1672,"url":3136},"https:\u002F\u002Fpypi.org\u002Fproject\u002Frequests",{"type":1664,"url":3138},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9hjg-9r4m-mvj7",[3140,3141],"pypi:requests@2.31.0","pypi:requests@2.32.3",{"id":156,"slug":3143,"dossier":89,"summary":3144,"aliases":3145,"sourceIds":3149,"published":3150,"modified":3151,"checkedAt":7,"severity":3152,"references":3154,"versionKeys":3167,"packageCount":32,"repositoryCount":1835},"ghsa-9hw9-ch79-4vh6-1ebda54f","Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch",[3146,3147,3148],"BIT-pillow-2026-59205","CVE-2026-59205","PYSEC-2026-3453",[156,3148],"2026-07-14T16:17:02.370Z","2026-07-22T02:59:40.628222965Z",[3153],{"type":1660,"score":1735},[3155,3157,3159,3161,3163,3165,3166],{"type":1708,"url":3156},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-9hw9-ch79-4vh6",{"type":1664,"url":3158},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59205",{"type":1669,"url":3160},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9715",{"type":1669,"url":3162},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fa9ffc42bedf4fc0a7ef8d6486e7f9e81e3397721",{"type":1675,"url":3164},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3453.yaml",{"type":1672,"url":2004},{"type":1664,"url":2470},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":157,"slug":3169,"dossier":45,"summary":3170,"aliases":3171,"sourceIds":3174,"published":3175,"modified":3176,"checkedAt":7,"severity":3177,"references":3180,"versionKeys":3197,"packageCount":32,"repositoryCount":32},"ghsa-9wx4-h78v-vm56-6a334c57","Requests `Session` object does not verify requests after making first request with verify=False",[3172,3173],"CVE-2024-35195","PYSEC-2026-1873",[157,3173],"2024-05-20T20:15:00Z","2026-07-07T17:57:17.012984050Z",[3178],{"type":1660,"score":3179},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[3181,3183,3185,3187,3189,3190,3192,3194,3195],{"type":1675,"url":3182},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",{"type":1664,"url":3184},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-35195",{"type":1675,"url":3186},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fpull\u002F6655",{"type":1669,"url":3188},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002Fa58d7f2ffb4d00b46dca2d70a3932a0b37e22fac",{"type":1672,"url":3130},{"type":1675,"url":3191},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q",{"type":1675,"url":3193},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FN7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ",{"type":1672,"url":3136},{"type":1664,"url":3196},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9wx4-h78v-vm56",[3140],{"id":158,"slug":3199,"dossier":45,"summary":3200,"aliases":3201,"sourceIds":3204,"published":3205,"modified":3206,"checkedAt":7,"severity":3207,"references":3211,"versionKeys":3217,"packageCount":32,"repositoryCount":1752},"ghsa-9x8q-7h8h-wcw9-af94166e","aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect",[3202,3203],"CVE-2026-54280","PYSEC-2026-2113",[158,3203],"2026-06-15T20:10:44Z","2026-07-13T07:26:14.649569270Z",[3208,3210],{"type":1732,"score":3209},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":1735},[3212,3214,3216],{"type":1664,"url":3213},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-9x8q-7h8h-wcw9",{"type":1669,"url":3215},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fa762eda5242f6490d6ba667533193f8b473ad587",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":159,"slug":3219,"dossier":45,"summary":3220,"aliases":3221,"sourceIds":3224,"published":3225,"modified":3226,"checkedAt":7,"severity":3227,"references":3231,"versionKeys":3242,"packageCount":32,"repositoryCount":1752},"ghsa-c427-h43c-vf67-fa5b38aa","AIOHTTP accepts duplicate Host headers",[3222,3223],"CVE-2026-34525","PYSEC-2026-2103",[159,3223],"2026-04-01T21:17:00.490Z","2026-07-13T07:26:42.158681139Z",[3228,3230],{"type":1732,"score":3229},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:L\u002FSI:L\u002FSA:N",{"type":1660,"score":1766},[3232,3234,3236,3238,3240,3241],{"type":1669,"url":3233},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-c427-h43c-vf67",{"type":1664,"url":3235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34525",{"type":1669,"url":3237},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53e2e6fc58b89c6185be7820bd2c9f40216b3000",{"type":1669,"url":3239},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fe00ca3cca92c465c7913c4beb763a72da9ed8349",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":160,"slug":3244,"dossier":45,"summary":3245,"aliases":3246,"sourceIds":3250,"published":3251,"modified":3252,"checkedAt":7,"severity":3253,"references":3258,"versionKeys":3274,"packageCount":32,"repositoryCount":480},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[3247,3248,3249],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[160],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[3254,3256],{"type":1660,"score":3255},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":1732,"score":3257},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3259,3261,3263,3265,3266,3268,3270,3272],{"type":1664,"url":3260},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":1675,"url":3262},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":1675,"url":3264},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":1672,"url":1864},{"type":1675,"url":3267},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":1675,"url":3269},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":1675,"url":3271},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":1675,"url":3273},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[1876,1877],{"id":161,"slug":3276,"dossier":45,"summary":3277,"aliases":3278,"sourceIds":3282,"published":3283,"modified":3284,"checkedAt":7,"severity":3285,"references":3289,"versionKeys":3327,"packageCount":32,"repositoryCount":101},"ghsa-cfh3-3jmp-rvhc-4e95572c","Pillow affected by out-of-bounds write when loading PSD images",[3279,3280,3281],"BIT-pillow-2026-25990","CVE-2026-25990","PYSEC-2026-2249",[161,3281],"2026-02-11T14:22:50Z","2026-07-13T07:26:49.514806069Z",[3286,3288],{"type":1732,"score":3287},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1660,"score":1735},[3290,3292,3294,3296,3298,3300,3301,3303,3305,3307,3308,3310,3312,3314,3315,3317,3319,3321,3323,3325],{"type":1675,"url":3291},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-cfh3-3jmp-rvhc",{"type":1664,"url":3293},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25990",{"type":1675,"url":3295},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9427",{"type":1675,"url":3297},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F54ba4db542ad3c7b918812a4e2d69c27735a3199",{"type":1675,"url":3299},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F9000313cc5d4a31bdcdd6d7f0781101abab553aa",{"type":1672,"url":2004},{"type":1675,"url":3302},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.1.1.html",{"type":1675,"url":3304},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-25990",{"type":1675,"url":3306},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-25990.json",{"type":1664,"url":2042},{"type":1664,"url":3309},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14873",{"type":1664,"url":3311},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:14874",{"type":1664,"url":3313},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16174",{"type":1664,"url":2044},{"type":1664,"url":3316},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:28385",{"type":1664,"url":3318},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3461",{"type":1664,"url":3320},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:3462",{"type":1664,"url":3322},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4128",{"type":1664,"url":3324},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:4942",{"type":1664,"url":3326},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:5168",[2008,2009,2010,2011,2012,2013,2014],{"id":162,"slug":3329,"dossier":45,"summary":3330,"aliases":3331,"sourceIds":3334,"published":3335,"modified":3336,"checkedAt":7,"severity":3337,"references":3340,"versionKeys":3357,"packageCount":32,"repositoryCount":480},"ghsa-cpwx-vrp4-4pq7-799bdc98","Jinja2 vulnerable to sandbox breakout through attr filter selecting format method",[3332,3333],"CVE-2025-27516","PYSEC-2026-1471",[162,3333],"2025-03-05T20:40:14Z","2026-07-07T17:56:16.836141266Z",[3338],{"type":1732,"score":3339},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:P\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3341,3343,3345,3347,3349,3351,3353,3355],{"type":1675,"url":3342},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",{"type":1664,"url":3344},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-27516",{"type":1669,"url":3346},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F90457bbf33b8662926ae65cdde4c4c32e756e403",{"type":1672,"url":3348},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja",{"type":1675,"url":3350},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00022.html",{"type":1675,"url":3352},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00045.html",{"type":1672,"url":3354},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fjinja2",{"type":1664,"url":3356},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cpwx-vrp4-4pq7",[3358,3359],"pypi:jinja2@3.1.3","pypi:jinja2@3.1.5",{"id":163,"slug":3361,"dossier":45,"summary":3362,"aliases":3363,"sourceIds":3366,"published":3367,"modified":3368,"checkedAt":7,"severity":3369,"references":3372,"versionKeys":3387,"packageCount":32,"repositoryCount":3389},"ghsa-cq5v-8q36-5273-b5e8d025","AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)",[3364,3365],"CVE-2026-69244","PYSEC-2026-3545",[163,3365],"2026-08-03T20:51:13Z","2026-08-04T21:27:00.629113523Z",[3370],{"type":1732,"score":3371},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3373,3375,3377,3379,3380,3382,3383,3385],{"type":1675,"url":3374},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1675,"url":3376},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13223",{"type":1675,"url":3378},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F49f65d54150397892f7bcc4aae887767d51c322d",{"type":1672,"url":1740},{"type":1675,"url":3381},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.3",{"type":1672,"url":2274},{"type":1664,"url":3384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cq5v-8q36-5273",{"type":1664,"url":3386},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69244",[1744,1745,1746,1747,1748,1749,1750,1751,3388],"pypi:aiohttp@3.14.1",11,{"id":164,"slug":3391,"dossier":45,"summary":3392,"aliases":3393,"sourceIds":3397,"published":3398,"modified":3399,"checkedAt":7,"severity":3400,"references":3405,"versionKeys":3421,"packageCount":32,"repositoryCount":32},"ghsa-cx63-2mw6-8hw5-1754ad59","setuptools vulnerable to Command Injection via package URL",[3394,3395,3396],"BIT-setuptools-2024-6345","CVE-2024-6345","PYSEC-2026-1918",[164,3396],"2024-07-15T03:30:57Z","2026-07-07T17:57:13.326243614Z",[3401,3403],{"type":1660,"score":3402},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1732,"score":3404},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:A\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[3406,3408,3410,3412,3413,3415,3417,3419],{"type":1664,"url":3407},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-6345",{"type":1675,"url":3409},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fpull\u002F4332",{"type":1675,"url":3411},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002F88807c7062788254f654ea8c03427adc859321f0",{"type":1672,"url":2361},{"type":1675,"url":3414},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fd6362117-ad57-4e83-951f-b8141c6e7ca5",{"type":1675,"url":3416},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00018.html",{"type":1672,"url":3418},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fsetuptools",{"type":1664,"url":3420},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-cx63-2mw6-8hw5",[2367],{"id":165,"slug":3423,"dossier":45,"summary":3424,"aliases":3425,"sourceIds":3429,"published":3430,"modified":3431,"checkedAt":7,"severity":3432,"references":3436,"versionKeys":3454,"packageCount":32,"repositoryCount":480},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[3426,3427,3428],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[165],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[3433,3434],{"type":1660,"score":2181},{"type":1732,"score":3435},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[3437,3439,3441,3443,3445,3447,3448,3450,3452],{"type":1664,"url":3438},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":1675,"url":3440},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":1675,"url":3442},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":1675,"url":3444},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":1675,"url":3446},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":1672,"url":1864},{"type":1675,"url":3449},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":1675,"url":3451},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":1675,"url":3453},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[1876,1877],{"id":166,"slug":3456,"dossier":45,"summary":3457,"aliases":3458,"sourceIds":3461,"published":3462,"modified":3463,"checkedAt":7,"severity":3464,"references":3466,"versionKeys":3475,"packageCount":32,"repositoryCount":461},"ghsa-fg7f-2386-8897-44d94e2f","Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex",[3459,3460],"CVE-2026-12061","PYSEC-2026-3582",[166,3460],"2026-07-31T16:51:09Z","2026-08-06T15:11:53.004587618Z",[3465],{"type":1660,"score":1735},[3467,3469,3470,3471,3473],{"type":1675,"url":3468},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":1672,"url":2036},{"type":1672,"url":2694},{"type":1664,"url":3472},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fg7f-2386-8897",{"type":1664,"url":3474},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12061",[2050,2051],{"id":167,"slug":3477,"dossier":45,"summary":3478,"aliases":3479,"sourceIds":3482,"published":3483,"modified":3484,"checkedAt":7,"severity":3485,"references":3490,"versionKeys":3513,"packageCount":32,"repositoryCount":1720},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[3480,3481],"CVE-2026-5241","PYSEC-2026-2290",[167,3481],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[3486,3488],{"type":1660,"score":3487},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":1660,"score":3489},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[3491,3493,3495,3497,3498,3500,3502,3504,3505,3507,3509,3511],{"type":1664,"url":3492},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":1669,"url":3494},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":1664,"url":3496},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":1664,"url":2046},{"type":1675,"url":3499},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":1675,"url":3501},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":1857,"url":3503},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":1672,"url":1706},{"type":1675,"url":3506},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":1708,"url":3508},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":1675,"url":3510},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":1664,"url":3512},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[1713,1714,1715,1716,1717,1718,1719],{"id":168,"slug":3515,"dossier":45,"summary":3516,"aliases":3517,"sourceIds":3520,"published":3521,"modified":3522,"checkedAt":7,"severity":3523,"references":3526,"versionKeys":3537,"packageCount":32,"repositoryCount":431},"ghsa-fh55-r93g-j68g-a231bc8e","AIOHTTP Vulnerable to Cookie Parser Warning Storm",[3518,3519],"CVE-2025-69230","PYSEC-2026-1105",[168,3519],"2026-01-05T23:13:46Z","2026-07-07T17:56:34.702331996Z",[3524],{"type":1732,"score":3525},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",[3527,3529,3531,3533,3534,3535],{"type":1675,"url":3528},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",{"type":1664,"url":3530},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69230",{"type":1669,"url":3532},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F64629a0834f94e46d9881f4e99c41a137e1f3326",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":3536},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fh55-r93g-j68g",[1744,1745,1746,1747,1748,1749,1750],{"id":169,"slug":3539,"dossier":89,"summary":3540,"aliases":3541,"sourceIds":3545,"published":3546,"modified":3547,"checkedAt":7,"severity":3548,"references":3551,"versionKeys":3565,"packageCount":32,"repositoryCount":1835},"ghsa-fj7v-r99m-22gq-e36cfebd","Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images",[3542,3543,3544],"BIT-pillow-2026-59198","CVE-2026-59198","PYSEC-2026-3494",[169,3544],"2026-07-20T23:09:36Z","2026-07-23T15:11:28.382441947Z",[3549],{"type":1660,"score":3550},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L",[3552,3554,3556,3558,3560,3561,3562,3563],{"type":1675,"url":3553},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",{"type":1664,"url":3555},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59198",{"type":1675,"url":3557},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9709",{"type":1675,"url":3559},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Feada3cbd7fb9963ee90673fb7b5270124a0d5f4b",{"type":1672,"url":2004},{"type":1675,"url":2470},{"type":1672,"url":2472},{"type":1664,"url":3564},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fj7v-r99m-22gq",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":170,"slug":3567,"dossier":45,"summary":2774,"aliases":3568,"sourceIds":3571,"published":3572,"modified":3573,"checkedAt":7,"severity":3574,"references":3577,"versionKeys":3588,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[3569,3570],"CVE-2025-1194","PYSEC-2026-1984",[170,3570],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[3575],{"type":1660,"score":3576},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[3578,3580,3582,3583,3585,3586],{"type":1664,"url":3579},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":1675,"url":3581},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":1672,"url":1706},{"type":1675,"url":3584},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":1672,"url":1902},{"type":1664,"url":3587},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[1713],{"id":171,"slug":3590,"dossier":45,"summary":3591,"aliases":3592,"sourceIds":3595,"published":3596,"modified":3597,"checkedAt":7,"severity":3598,"references":3601,"versionKeys":3607,"packageCount":32,"repositoryCount":1752},"ghsa-g3cq-j2xw-wf74-4475e17b","aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup",[3593,3594],"CVE-2026-54278","PYSEC-2026-2111",[171,3594],"2026-06-15T20:09:51Z","2026-07-13T07:26:25.190325605Z",[3599,3600],{"type":1732,"score":2089},{"type":1660,"score":1735},[3602,3604,3605],{"type":1664,"url":3603},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g3cq-j2xw-wf74",{"type":1672,"url":1740},{"type":1669,"url":3606},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4f7480e474cccc6a8cc2c92ad3f17a31dedf8232",[1744,1745,1746,1747,1748,1749,1750,1751],{"id":172,"slug":3609,"dossier":45,"summary":3610,"aliases":3611,"sourceIds":3614,"published":3615,"modified":3616,"checkedAt":7,"severity":3617,"references":3620,"versionKeys":3639,"packageCount":32,"repositoryCount":32},"ghsa-g7vv-2v7x-gj9p-5ef970c3","tqdm CLI arguments injection attack",[3612,3613],"CVE-2024-34062","PYSEC-2026-1976",[172,3613],"2024-05-03T19:33:28Z","2026-07-07T17:56:20.187915678Z",[3618],{"type":1660,"score":3619},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3621,3623,3625,3627,3629,3631,3633,3635,3637],{"type":1675,"url":3622},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fsecurity\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",{"type":1664,"url":3624},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34062",{"type":1675,"url":3626},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm\u002Fcommit\u002F4e613f84ed2ae029559f539464df83fa91feb316",{"type":1672,"url":3628},"https:\u002F\u002Fgithub.com\u002Ftqdm\u002Ftqdm",{"type":1675,"url":3630},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FPA3GIGHPWAHCTT4UF57LTPZGWHAX3GW6",{"type":1675,"url":3632},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FQRECVQCCESHBS3UJOWNXQUIX725TKNY6",{"type":1675,"url":3634},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVA337CYUS4SLRFV2P6MX6MZ2LKFURKJC",{"type":1672,"url":3636},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftqdm",{"type":1664,"url":3638},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g7vv-2v7x-gj9p",[3640],"pypi:tqdm@4.66.2",{"id":173,"slug":3642,"dossier":45,"summary":3643,"aliases":3644,"sourceIds":3647,"published":3648,"modified":3649,"checkedAt":7,"severity":3650,"references":3652,"versionKeys":3665,"packageCount":32,"repositoryCount":431},"ghsa-g84x-mcqj-x9qq-fc677e5d","AIOHTTP vulnerable to DoS through chunked messages",[3645,3646],"CVE-2025-69229","PYSEC-2026-1106",[173,3646],"2026-01-05T23:13:29Z","2026-07-07T17:56:31.463290158Z",[3651],{"type":1732,"score":2089},[3653,3655,3657,3659,3661,3662,3663],{"type":1675,"url":3654},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",{"type":1664,"url":3656},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69229",{"type":1675,"url":3658},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F4ed97a4e46eaf61bd0f05063245f613469700229",{"type":1675,"url":3660},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdc3170b56904bdf814228fae70a5501a42a6c712",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":3664},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-g84x-mcqj-x9qq",[1744,1745,1746,1747,1748,1749,1750],{"id":174,"slug":3667,"dossier":89,"summary":3668,"aliases":3669,"sourceIds":3672,"published":3673,"modified":3674,"checkedAt":7,"severity":3675,"references":3680,"versionKeys":3690,"packageCount":32,"repositoryCount":3693},"ghsa-gc5v-m9x4-r6x2-b9828ad8","Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function",[3670,3671],"CVE-2026-25645","PYSEC-2026-2275",[174,3671],"2026-03-25T16:56:28Z","2026-07-13T07:26:34.091663004Z",[3676,3678],{"type":1660,"score":3677},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"type":1660,"score":3679},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",[3681,3683,3685,3687,3688],{"type":1664,"url":3682},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fsecurity\u002Fadvisories\u002FGHSA-gc5v-m9x4-r6x2",{"type":1664,"url":3684},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25645",{"type":1669,"url":3686},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Fcommit\u002F66d21cb07bd6255b1280291c4fafb71803cdb3b7",{"type":1672,"url":3130},{"type":1664,"url":3689},"https:\u002F\u002Fgithub.com\u002Fpsf\u002Frequests\u002Freleases\u002Ftag\u002Fv2.33.0",[3140,3141,3691,3692],"pypi:requests@2.32.4","pypi:requests@2.32.5",15,{"id":175,"slug":3695,"dossier":45,"summary":3696,"aliases":3697,"sourceIds":3700,"published":3701,"modified":3702,"checkedAt":7,"severity":3703,"references":3706,"versionKeys":3716,"packageCount":32,"repositoryCount":461},"ghsa-gfwx-w7gr-fvh7-16d22532","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nltk",[3698,3699],"CVE-2026-33230","PYSEC-2026-2235",[175,3699],"2026-03-18T20:23:33Z","2026-07-13T07:26:40.492720011Z",[3704],{"type":1660,"score":3705},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",[3707,3709,3711,3713,3715],{"type":1708,"url":3708},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-gfwx-w7gr-fvh7",{"type":1664,"url":3710},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33230",{"type":1669,"url":3712},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F1c3f799607eeb088cab2491dcf806ae83c29ad8f",{"type":1669,"url":3714},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002F40d0bc1d484a3458d6a63ecb5ba4957ab16ba14e",{"type":1672,"url":2036},[2050,2051],{"id":176,"slug":3718,"dossier":89,"summary":3719,"aliases":3720,"sourceIds":3723,"published":3724,"modified":3725,"checkedAt":7,"severity":3726,"references":3728,"versionKeys":3739,"packageCount":32,"repositoryCount":1835},"ghsa-gm62-xv2j-4w53-5befa184","urllib3 allows an unbounded number of links in the decompression chain",[3721,3722],"CVE-2025-66418","PYSEC-2026-1998",[176,3722],"2025-12-05T18:15:19Z","2026-07-07T17:57:28.931610368Z",[3727],{"type":1732,"score":1815},[3729,3731,3733,3735,3736,3737],{"type":1675,"url":3730},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",{"type":1664,"url":3732},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-66418",{"type":1669,"url":3734},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002F24d7b67eac89f94e11003424bcf0d8f7b72222a8",{"type":1672,"url":1824},{"type":1672,"url":1826},{"type":1664,"url":3738},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gm62-xv2j-4w53",[1830,1831,1832,1833,1834],{"id":177,"slug":3741,"dossier":45,"summary":3742,"aliases":3743,"sourceIds":3746,"published":3747,"modified":3748,"checkedAt":7,"severity":3749,"references":3752,"versionKeys":3767,"packageCount":32,"repositoryCount":32},"ghsa-gmj6-6f8f-6699-e3e02f35","Jinja has a sandbox breakout through malicious filenames",[3744,3745],"CVE-2024-56201","PYSEC-2026-1472",[177,3745],"2024-12-23T17:54:12Z","2026-07-07T17:56:55.074166933Z",[3750,3751],{"type":1660,"score":2348},{"type":1732,"score":3339},[3753,3755,3757,3759,3761,3762,3764,3765],{"type":1675,"url":3754},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",{"type":1664,"url":3756},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56201",{"type":1675,"url":3758},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fissues\u002F1792",{"type":1669,"url":3760},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F767b23617628419ae3709ccfb02f9602ae9fe51f",{"type":1672,"url":3348},{"type":1675,"url":3763},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Freleases\u002Ftag\u002F3.1.5",{"type":1672,"url":3354},{"type":1664,"url":3766},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gmj6-6f8f-6699",[3358],{"id":178,"slug":3769,"dossier":45,"summary":3770,"aliases":3771,"sourceIds":3774,"published":3775,"modified":3776,"checkedAt":7,"severity":3777,"references":3780,"versionKeys":3793,"packageCount":32,"repositoryCount":32},"ghsa-gphh-9q3h-jgpp-606af12e","banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI",[3772,3773],"CVE-2026-44209","PYSEC-2026-2390",[178,3773],"2026-05-08T20:36:22Z","2026-07-13T16:42:52.498372734Z",[3778],{"type":1660,"score":3779},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[3781,3783,3785,3787,3789,3791],{"type":1675,"url":3782},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fsecurity\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",{"type":1664,"url":3784},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44209",{"type":1675,"url":3786},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks\u002Fpull\u002F74",{"type":1672,"url":3788},"https:\u002F\u002Fgithub.com\u002Fmasci\u002Fbanks",{"type":1672,"url":3790},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fbanks",{"type":1664,"url":3792},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-gphh-9q3h-jgpp",[3794],"pypi:banks@2.2.0",{"id":179,"slug":3796,"dossier":89,"summary":3797,"aliases":3798,"sourceIds":3802,"published":3803,"modified":3804,"checkedAt":7,"severity":3805,"references":3808,"versionKeys":3820,"packageCount":32,"repositoryCount":3828},"ghsa-h35f-9h28-mq5c-f3238ba1","setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC\u002FNFD) on macOS APFS\u002FHFS+",[3799,3800,3801],"BIT-setuptools-2026-59890","CVE-2026-59890","PYSEC-2026-3447",[179,3801],"2026-07-08T17:17:27.020Z","2026-07-23T09:29:39.408842775Z",[3806],{"type":1660,"score":3807},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[3809,3811,3813,3815,3817,3818],{"type":1708,"url":3810},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fsecurity\u002Fadvisories\u002FGHSA-h35f-9h28-mq5c",{"type":1664,"url":3812},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59890",{"type":1669,"url":3814},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Fcommit\u002Fdd9f436a36486b4cb8a4c70a2321548b0be09b8f",{"type":1675,"url":3816},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fsetuptools\u002FPYSEC-2026-3447.yaml",{"type":1672,"url":2361},{"type":1664,"url":3819},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fsetuptools\u002Freleases\u002Ftag\u002Fv83.0.0",[2367,2368,2369,3821,3822,3823,3824,3825,3826,3827],"pypi:setuptools@79.0.1","pypi:setuptools@80.0.1","pypi:setuptools@80.3.1","pypi:setuptools@80.4.0","pypi:setuptools@80.8.0","pypi:setuptools@80.9.0","pypi:setuptools@82.0.1",14,{"id":180,"slug":3830,"dossier":45,"summary":3831,"aliases":3832,"sourceIds":3835,"published":3836,"modified":3837,"checkedAt":7,"severity":3838,"references":3841,"versionKeys":3862,"packageCount":32,"repositoryCount":32},"ghsa-h75v-3vvj-5mfj-d8fc6bb7","Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter",[3833,3834],"CVE-2024-34064","PYSEC-2026-1474",[180,3834],"2024-05-06T14:20:59Z","2026-07-07T17:57:30.872296178Z",[3839],{"type":1660,"score":3840},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",[3842,3844,3846,3848,3849,3851,3853,3855,3857,3859,3860],{"type":1675,"url":3843},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",{"type":1664,"url":3845},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-34064",{"type":1669,"url":3847},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F0668239dc6b44ef38e7a6c9f91f312fd4ca581cb",{"type":1672,"url":3348},{"type":1675,"url":3850},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F12\u002Fmsg00009.html",{"type":1675,"url":3852},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002F567XIGSZMABG6TSMYWD7MIYNJSUQQRUC",{"type":1675,"url":3854},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FGCLF44KY43BSVMTE6S53B4V5WP3FRRSE",{"type":1675,"url":3856},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FSSCBHIL6BYKR5NRCBXP4XMP2CEEKGFVS",{"type":1675,"url":3858},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FZALNWE3TXPPHVPSI3AZ5CTMSTAVN5UMS",{"type":1672,"url":3354},{"type":1664,"url":3861},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h75v-3vvj-5mfj",[3358],{"id":181,"slug":3864,"dossier":45,"summary":3865,"aliases":3866,"sourceIds":3869,"published":3870,"modified":3871,"checkedAt":7,"severity":3872,"references":3875,"versionKeys":3889,"packageCount":32,"repositoryCount":461},"ghsa-h8wq-7xc4-p3qx-d8f6b020","NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()",[3867,3868],"CVE-2026-0846","PYSEC-2026-97",[181,3868],"2026-03-09T20:16:05.703Z","2026-06-10T17:02:23.828594589Z",[3873,3874],{"type":1660,"score":2614},{"type":1660,"score":2616},[3876,3878,3880,3882,3883,3885,3887],{"type":1664,"url":3877},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-0846",{"type":1675,"url":3879},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3485",{"type":1675,"url":3881},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fb2e1164bf89277f79b65406c829b99fb20ca1974",{"type":1672,"url":2036},{"type":1675,"url":3884},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-97.yaml",{"type":1708,"url":3886},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F007b84f8-418e-4300-99d0-bf504c2f97eb",{"type":1664,"url":3888},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-h8wq-7xc4-p3qx",[2050,2051],{"id":182,"slug":3891,"dossier":45,"summary":3892,"aliases":3893,"sourceIds":3896,"published":3897,"modified":3898,"checkedAt":7,"severity":3899,"references":3902,"versionKeys":3911,"packageCount":32,"repositoryCount":1752},"ghsa-hcc4-c3v8-rx92-ddf32b5c","AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector",[3894,3895],"CVE-2026-34513","PYSEC-2026-2095",[182,3895],"2026-04-01T21:16:59.267Z","2026-07-13T07:26:43.174352940Z",[3900,3901],{"type":1732,"score":1943},{"type":1660,"score":1735},[3903,3905,3907,3909,3910],{"type":1669,"url":3904},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hcc4-c3v8-rx92",{"type":1664,"url":3906},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34513",{"type":1669,"url":3908},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc4d77c3533122be353b8afca8e8675e3b4cbda98",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":183,"slug":3913,"dossier":45,"summary":3914,"aliases":3915,"sourceIds":3918,"published":3919,"modified":3920,"checkedAt":7,"severity":3921,"references":3925,"versionKeys":3933,"packageCount":32,"repositoryCount":1752},"ghsa-hg6j-4rv6-33pg-d0ac8db0","AIOHTTP is vulnerable to cross-origin redirect with per-request cookies",[3916,3917],"CVE-2026-47265","PYSEC-2026-2105",[183,3917],"2026-06-02T20:16:37.903Z","2026-07-13T07:26:51.969507320Z",[3922,3924],{"type":1732,"score":3923},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U",{"type":1660,"score":2616},[3926,3928,3930,3932],{"type":1669,"url":3927},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hg6j-4rv6-33pg",{"type":1664,"url":3929},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-47265",{"type":1669,"url":3931},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Ff54c40851b0d6c4bbdab97ba518a223adda32478",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":184,"slug":3935,"dossier":45,"summary":3936,"aliases":3937,"sourceIds":3940,"published":3941,"modified":3942,"checkedAt":7,"severity":3943,"references":3945,"versionKeys":3954,"packageCount":32,"repositoryCount":1720},"ghsa-hm4w-wwcw-mr6r-b3d243f3","pyasn1: Uncontrolled resource consumption when converting decoded REAL values",[3938,3939],"CVE-2026-59886","PYSEC-2026-3457",[184,3939],"2026-07-14T17:17:15.010Z","2026-07-23T09:29:38.810475714Z",[3944],{"type":1660,"score":1735},[3946,3948,3950,3952,3953],{"type":1664,"url":3947},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-hm4w-wwcw-mr6r",{"type":1664,"url":3949},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59886",{"type":1669,"url":3951},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002Fe60c691cb91addb8fcefa2f537e85ede6fb1e886",{"type":1672,"url":2567},{"type":1664,"url":2978},[2575,2980],{"id":185,"slug":3956,"dossier":45,"summary":3957,"aliases":3958,"sourceIds":3961,"published":3962,"modified":3963,"checkedAt":7,"severity":3964,"references":3968,"versionKeys":3974,"packageCount":32,"repositoryCount":1752},"ghsa-hpj7-wq8m-9hgp-fac25647","aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges",[3959,3960],"CVE-2026-54276","PYSEC-2026-2109",[185,3960],"2026-06-15T20:09:06Z","2026-07-13T07:26:28.701980401Z",[3965,3967],{"type":1732,"score":3966},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:L\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",{"type":1660,"score":3705},[3969,3971,3973],{"type":1664,"url":3970},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-hpj7-wq8m-9hgp",{"type":1669,"url":3972},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F38d16060037e1bfcd6d677abababa3c2a4bb58fa",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":186,"slug":3976,"dossier":45,"summary":3977,"aliases":3978,"sourceIds":3981,"published":3982,"modified":3983,"checkedAt":7,"severity":3984,"references":3988,"versionKeys":4005,"packageCount":32,"repositoryCount":34},"ghsa-hx9q-6w63-j58v-8d6e2248","orjson does not limit recursion for deeply nested JSON documents",[3979,3980],"CVE-2025-67221","PYSEC-2026-107",[186,3980],"2026-01-22T17:16:01.433Z","2026-06-10T17:02:27.794281728Z",[3985,3987],{"type":1732,"score":3986},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":1660,"score":1735},[3989,3991,3993,3995,3997,3999,4001,4003],{"type":1664,"url":3990},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-67221",{"type":1675,"url":3992},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fissues\u002F620",{"type":1675,"url":3994},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002FCVE-2025-67221\u002Fissues\u002F1",{"type":1675,"url":3996},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson\u002Fcommit\u002F62bb185b70785ded49c79c26f8c9781f1e6fe370",{"type":1672,"url":3998},"https:\u002F\u002Fgithub.com\u002Fijl\u002Forjson",{"type":1708,"url":4000},"https:\u002F\u002Fgithub.com\u002Fkpatsakis\u002Forjson_vulnerability",{"type":1675,"url":4002},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Forjson\u002FPYSEC-2026-107.yaml",{"type":1664,"url":4004},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hx9q-6w63-j58v",[4006,4007,4008,4009],"pypi:orjson@3.10.14","pypi:orjson@3.10.15","pypi:orjson@3.11.4","pypi:orjson@3.11.5",{"id":187,"slug":4011,"dossier":45,"summary":4012,"aliases":4013,"sourceIds":4016,"published":4017,"modified":4018,"checkedAt":7,"severity":4019,"references":4023,"versionKeys":4039,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[4014,4015],"CVE-2024-11394","PYSEC-2024-229",[187,4015],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[4020,4022],{"type":1660,"score":4021},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1660,"score":3402},[4024,4026,4028,4030,4031,4033,4035,4037],{"type":1664,"url":4025},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":1675,"url":4027},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":1675,"url":4029},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":1672,"url":1706},{"type":1675,"url":4032},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":1675,"url":4034},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":1664,"url":4036},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":1664,"url":4038},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[1713],{"id":188,"slug":4041,"dossier":45,"summary":4042,"aliases":4043,"sourceIds":4046,"published":4047,"modified":4048,"checkedAt":7,"severity":4049,"references":4054,"versionKeys":4072,"packageCount":32,"repositoryCount":1752},"ghsa-jg22-mg44-37j8-b8064c77","AIOHTTP is Vulnerable to Deserialization of Untrusted Data",[4044,4045],"CVE-2026-34993","PYSEC-2026-2104",[188,4045],"2026-06-02T20:16:34.857Z","2026-07-13T07:26:37.684367184Z",[4050,4052],{"type":1660,"score":4051},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:H\u002FA:L",{"type":1660,"score":4053},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[4055,4057,4059,4061,4062,4064,4066,4068,4069,4070],{"type":1669,"url":4056},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jg22-mg44-37j8",{"type":1664,"url":4058},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34993",{"type":1669,"url":4060},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fdcf40f30637e8752c76781cf6703b5a236749a00",{"type":1672,"url":1740},{"type":1675,"url":4063},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34993",{"type":1675,"url":4065},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34993.json",{"type":1664,"url":4067},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":1664,"url":3496},{"type":1664,"url":2046},{"type":1857,"url":4071},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484099",[1744,1745,1746,1747,1748,1749,1750,1751],{"id":189,"slug":4074,"dossier":45,"summary":4075,"aliases":4076,"sourceIds":4079,"published":4080,"modified":4081,"checkedAt":7,"severity":4082,"references":4084,"versionKeys":4095,"packageCount":32,"repositoryCount":431},"ghsa-jj3x-wxrx-4x23-407bafac","AIOHTTP vulnerable to DoS when bypassing asserts",[4077,4078],"CVE-2025-69227","PYSEC-2026-1107",[189,4078],"2026-01-05T23:10:15Z","2026-07-07T17:57:17.782415842Z",[4083],{"type":1732,"score":2089},[4085,4087,4089,4091,4092,4093],{"type":1675,"url":4086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",{"type":1664,"url":4088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69227",{"type":1675,"url":4090},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbc1319ec3cbff9438a758951a30907b072561259",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":4094},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jj3x-wxrx-4x23",[1744,1745,1746,1747,1748,1749,1750],{"id":190,"slug":4097,"dossier":89,"summary":4098,"aliases":4099,"sourceIds":4103,"published":4104,"modified":4105,"checkedAt":7,"severity":4106,"references":4108,"versionKeys":4122,"packageCount":32,"repositoryCount":1835},"ghsa-jjj6-mw9f-p565-ed2d1f46","Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()",[4100,4101,4102],"BIT-pillow-2026-59200","CVE-2026-59200","PYSEC-2026-3495",[190,4102],"2026-07-20T23:11:29Z","2026-07-23T15:11:28.034031834Z",[4107],{"type":1660,"score":1735},[4109,4111,4113,4115,4117,4118,4119,4120],{"type":1675,"url":4110},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",{"type":1664,"url":4112},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59200",{"type":1675,"url":4114},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9718",{"type":1675,"url":4116},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff7a31ea75e460e108c37126da1f47812f21f6b09",{"type":1672,"url":2004},{"type":1675,"url":2470},{"type":1672,"url":2472},{"type":1664,"url":4121},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjj6-mw9f-p565",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":191,"slug":4124,"dossier":45,"summary":4125,"aliases":4126,"sourceIds":4129,"published":4130,"modified":4131,"checkedAt":7,"severity":4132,"references":4134,"versionKeys":4147,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[4127,4128],"CVE-2025-3264","PYSEC-2026-1985",[191,4128],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[4133],{"type":1660,"score":2127},[4135,4137,4139,4141,4142,4144,4145],{"type":1664,"url":4136},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":1675,"url":4138},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":1675,"url":4140},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":1672,"url":1706},{"type":1675,"url":4143},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":1672,"url":1902},{"type":1664,"url":4146},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[1713],{"id":192,"slug":4149,"dossier":45,"summary":4150,"aliases":4151,"sourceIds":4154,"published":4155,"modified":4156,"checkedAt":7,"severity":4157,"references":4159,"versionKeys":4176,"packageCount":32,"repositoryCount":461},"ghsa-jm6w-m3j8-898g-326a1845","Unauthenticated remote shutdown in nltk.app.wordnet_app",[4152,4153],"CVE-2026-33231","PYSEC-2026-2236",[192,4153],"2026-03-19T12:42:20Z","2026-07-13T07:26:55.331693381Z",[4158],{"type":1660,"score":1735},[4160,4162,4164,4166,4167,4169,4171,4172,4173,4174],{"type":1708,"url":4161},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-jm6w-m3j8-898g",{"type":1664,"url":4163},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-33231",{"type":1669,"url":4165},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fcommit\u002Fbbaae83db86a0f49e00f5b0db44a7254c268de9b",{"type":1672,"url":2036},{"type":1675,"url":4168},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-33231",{"type":1675,"url":4170},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-33231.json",{"type":1664,"url":2044},{"type":1664,"url":4067},{"type":1664,"url":2046},{"type":1857,"url":4175},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2449836",[2050,2051],{"id":193,"slug":4178,"dossier":45,"summary":4179,"aliases":4180,"sourceIds":4183,"published":4184,"modified":4185,"checkedAt":7,"severity":4186,"references":4190,"versionKeys":4223,"packageCount":32,"repositoryCount":431},"ghsa-jr27-m4p2-rc6r-4991bc00","Denial of Service in pyasn1 via Unbounded Recursion",[4181,4182],"CVE-2026-30922","PYSEC-2026-2263",[193,4182],"2026-03-17T16:17:33Z","2026-07-21T15:30:39.553074080Z",[4187,4189],{"type":1660,"score":4188},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"type":1660,"score":1735},[4191,4193,4195,4197,4199,4200,4202,4204,4206,4208,4209,4211,4213,4215,4217,4219,4221],{"type":1708,"url":4192},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-jr27-m4p2-rc6r",{"type":1664,"url":4194},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-30922",{"type":1675,"url":4196},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F5a49bd1fe93b5b866a1210f6bf0a3924f21572c8",{"type":1669,"url":4198},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",{"type":1675,"url":2042},{"type":1675,"url":4201},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22970",{"type":1675,"url":4203},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22987",{"type":1675,"url":4205},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24761",{"type":1675,"url":4207},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24762",{"type":1675,"url":2046},{"type":1675,"url":4210},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:41928",{"type":1675,"url":4212},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6309",{"type":1675,"url":4214},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6568",{"type":1675,"url":4216},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6720",{"type":1675,"url":4218},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6912",{"type":1675,"url":4220},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:6926",{"type":1675,"url":4222},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2026\u002F05\u002Fmsg00001.html",[2575],{"id":194,"slug":4225,"dossier":45,"summary":4226,"aliases":4227,"sourceIds":4230,"published":4231,"modified":4232,"checkedAt":7,"severity":4233,"references":4235,"versionKeys":4246,"packageCount":32,"repositoryCount":1720},"ghsa-m4p7-r5rc-7g4j-889a943d","pyasn1 BER\u002FCER\u002FDER decoder denial of service via unbounded long-form tag IDs",[4228,4229],"CVE-2026-59884","PYSEC-2026-3455",[194,4229],"2026-07-14T17:17:14.750Z","2026-08-02T02:59:55.269509518Z",[4234],{"type":1660,"score":1735},[4236,4238,4240,4242,4243,4244],{"type":1664,"url":4237},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fsecurity\u002Fadvisories\u002FGHSA-m4p7-r5rc-7g4j",{"type":1664,"url":4239},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59884",{"type":1669,"url":4241},"https:\u002F\u002Fgithub.com\u002Fpyasn1\u002Fpyasn1\u002Fcommit\u002F628e36ecbb5277a3f01572ce418ef54271b165a5",{"type":1672,"url":2567},{"type":1664,"url":2978},{"type":1675,"url":4245},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyasn1\u002FPYSEC-2026-3455.yaml",[2575,2980],{"id":195,"slug":4248,"dossier":45,"summary":4249,"aliases":4250,"sourceIds":4253,"published":4254,"modified":4255,"checkedAt":7,"severity":4256,"references":4261,"versionKeys":4270,"packageCount":32,"repositoryCount":1752},"ghsa-m5qp-6w8w-w647-495897bd","AIOHTTP has a Multipart Header Size Bypass",[4251,4252],"CVE-2026-34516","PYSEC-2026-2098",[195,4252],"2026-04-01T21:16:59.723Z","2026-07-13T07:26:19.821892403Z",[4257,4258,4259],{"type":1660,"score":1735},{"type":1732,"score":2089},{"type":1732,"score":4260},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:U\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[4262,4264,4266,4268,4269],{"type":1669,"url":4263},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m5qp-6w8w-w647",{"type":1664,"url":4265},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34516",{"type":1669,"url":4267},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F8a74257b3804c9aac0bf644af93070f68f6c5a6f",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":196,"slug":4272,"dossier":45,"summary":4273,"aliases":4274,"sourceIds":4277,"published":4278,"modified":4279,"checkedAt":7,"severity":4280,"references":4283,"versionKeys":4289,"packageCount":32,"repositoryCount":1752},"ghsa-m6qw-4cw2-hm4m-3f6d3ee7","aiohttp: CRLF injection in multipart headers",[4275,4276],"CVE-2026-50269","PYSEC-2026-2106",[196,4276],"2026-06-15T20:07:26Z","2026-07-13T07:26:17.983947245Z",[4281,4282],{"type":1732,"score":1764},{"type":1660,"score":1735},[4284,4286,4288],{"type":1664,"url":4285},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-m6qw-4cw2-hm4m",{"type":1669,"url":4287},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fbf88077ebb14f4c29924b8e8904cba20c55c28b8",{"type":1672,"url":1740},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":197,"slug":4291,"dossier":45,"summary":4292,"aliases":4293,"sourceIds":4296,"published":4297,"modified":4298,"checkedAt":7,"severity":4299,"references":4302,"versionKeys":4310,"packageCount":32,"repositoryCount":461},"ghsa-mf9v-mfxr-j63j-1a7db6d4","urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",[4294,4295],"CVE-2026-44432","PYSEC-2026-142",[197,4295],"2026-05-11T14:51:45Z","2026-06-08T20:00:12.284378628Z",[4300,4301],{"type":1660,"score":1735},{"type":1732,"score":1815},[4303,4305,4307,4309],{"type":1664,"url":4304},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9v-mfxr-j63j",{"type":1664,"url":4306},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44432",{"type":1675,"url":4308},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Furllib3\u002FPYSEC-2026-142.yaml",{"type":1672,"url":1824},[4311],"pypi:urllib3@2.6.3",{"id":198,"slug":4313,"dossier":45,"summary":4314,"aliases":4315,"sourceIds":4318,"published":4319,"modified":4320,"checkedAt":7,"severity":4321,"references":4324,"versionKeys":4337,"packageCount":32,"repositoryCount":3389},"ghsa-mf9w-mj56-hr94-a492e0f4","python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",[4316,4317],"CVE-2026-28684","PYSEC-2026-2270",[198,4317],"2026-04-20T17:16:33.087Z","2026-07-13T07:26:26.604845458Z",[4322],{"type":1660,"score":4323},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[4325,4327,4329,4331,4333,4335],{"type":1669,"url":4326},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fsecurity\u002Fadvisories\u002FGHSA-mf9w-mj56-hr94",{"type":1664,"url":4328},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-28684",{"type":1669,"url":4330},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311",{"type":1675,"url":4332},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Fcommit\u002F790c5c02991100aa1bf41ee5330aca75edc51311.patch",{"type":1672,"url":4334},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv",{"type":1664,"url":4336},"https:\u002F\u002Fgithub.com\u002Ftheskumar\u002Fpython-dotenv\u002Freleases\u002Ftag\u002Fv1.2.2",[4338,4339,4340,4341],"pypi:python-dotenv@1.0.1","pypi:python-dotenv@1.1.0","pypi:python-dotenv@1.1.1","pypi:python-dotenv@1.2.1",{"id":199,"slug":4343,"dossier":45,"summary":4344,"aliases":4345,"sourceIds":4348,"published":4349,"modified":4350,"checkedAt":7,"severity":4351,"references":4354,"versionKeys":4369,"packageCount":32,"repositoryCount":3389},"ghsa-mfx4-hv73-q22v-b33d9650","AIOHTTP: HTTP request smuggling via WebSocket upgrade",[4346,4347],"CVE-2026-69243","PYSEC-2026-3546",[199,4347],"2026-08-03T20:46:10Z","2026-08-04T21:26:59.595519014Z",[4352],{"type":1732,"score":4353},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4355,4357,4359,4361,4362,4364,4365,4367],{"type":1675,"url":4356},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1675,"url":4358},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F13017",{"type":1675,"url":4360},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",{"type":1672,"url":1740},{"type":1675,"url":4363},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Freleases\u002Ftag\u002Fv3.14.2",{"type":1672,"url":2274},{"type":1664,"url":4366},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mfx4-hv73-q22v",{"type":1664,"url":4368},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-69243",[1744,1745,1746,1747,1748,1749,1750,1751,3388],{"id":200,"slug":4371,"dossier":45,"summary":4372,"aliases":4373,"sourceIds":4376,"published":4377,"modified":4378,"checkedAt":7,"severity":4379,"references":4381,"versionKeys":4394,"packageCount":32,"repositoryCount":3389},"ghsa-mq44-7p77-q5h7-6bd0337a","AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate",[4374,4375],"CVE-2026-59881","PYSEC-2026-3547",[200,4375],"2026-08-03T20:40:55Z","2026-08-04T21:27:00.153248525Z",[4380],{"type":1732,"score":2588},[4382,4384,4386,4388,4390,4391,4392],{"type":1675,"url":4383},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",{"type":1664,"url":4385},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59881",{"type":1675,"url":4387},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fpull\u002F12978",{"type":1675,"url":4389},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F47fb6ae354d4fa22048f4dbe7dbf82b625f0a2f6",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":4393},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mq44-7p77-q5h7",[1744,1745,1746,1747,1748,1749,1750,1751,3388],{"id":201,"slug":4396,"dossier":45,"summary":4397,"aliases":4398,"sourceIds":4401,"published":4402,"modified":4403,"checkedAt":7,"severity":4404,"references":4406,"versionKeys":4417,"packageCount":32,"repositoryCount":431},"ghsa-mqqc-3gqh-h2x8-6d702daf","AIOHTTP has unicode match groups in regexes for ASCII protocol elements",[4399,4400],"CVE-2025-69225","PYSEC-2026-1109",[201,4400],"2026-01-05T23:09:30Z","2026-07-07T17:56:18.569417663Z",[4405],{"type":1732,"score":1764},[4407,4409,4411,4413,4414,4415],{"type":1675,"url":4408},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",{"type":1664,"url":4410},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-69225",{"type":1669,"url":4412},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002Fc7b7a044f88c71cefda95ec75cdcfaa4792b3b96",{"type":1672,"url":1740},{"type":1672,"url":2274},{"type":1664,"url":4416},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mqqc-3gqh-h2x8",[1744,1745,1746,1747,1748,1749,1750],{"id":202,"slug":4419,"dossier":45,"summary":4420,"aliases":4421,"sourceIds":4424,"published":4425,"modified":4426,"checkedAt":7,"severity":4427,"references":4430,"versionKeys":4439,"packageCount":32,"repositoryCount":1752},"ghsa-mwh4-6h8g-pg8w-881420d8","AIOHTTP has HTTP response splitting via \\r in reason phrase",[4422,4423],"CVE-2026-34519","PYSEC-2026-2101",[202,4423],"2026-04-01T21:17:00.170Z","2026-07-13T07:26:39.246105773Z",[4428,4429],{"type":1732,"score":1764},{"type":1660,"score":1766},[4431,4433,4435,4437,4438],{"type":1669,"url":4432},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-mwh4-6h8g-pg8w",{"type":1664,"url":4434},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34519",{"type":1669,"url":4436},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F53b35a2f8869c37a133e60bf1a82a1c01642ba2b",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":203,"slug":4441,"dossier":45,"summary":4442,"aliases":4443,"sourceIds":4446,"published":4447,"modified":4448,"checkedAt":7,"severity":4449,"references":4451,"versionKeys":4468,"packageCount":32,"repositoryCount":461},"ghsa-p4gq-832x-fm9v-9f1db448","Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read",[4444,4445],"CVE-2026-54293","PYSEC-2026-2078",[203,4445],"2026-06-16T14:34:15Z","2026-07-21T12:46:29.659855804Z",[4450],{"type":1660,"score":2616},[4452,4454,4456,4458,4459,4461,4463,4464,4466],{"type":1708,"url":4453},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-p4gq-832x-fm9v",{"type":1664,"url":4455},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-54293",{"type":1669,"url":4457},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fpull\u002F3575",{"type":1675,"url":3499},{"type":1675,"url":4460},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-54293",{"type":1857,"url":4462},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2491486",{"type":1672,"url":2036},{"type":1675,"url":4465},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fnltk\u002FPYSEC-2026-2078.yaml",{"type":1675,"url":4467},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-54293.json",[2050,2051],{"id":204,"slug":4470,"dossier":45,"summary":4471,"aliases":4472,"sourceIds":4475,"published":4476,"modified":4477,"checkedAt":7,"severity":4478,"references":4481,"versionKeys":4490,"packageCount":32,"repositoryCount":1752},"ghsa-p998-jp59-783m-17c88f0d","AIOHTTP affected by UNC SSRF\u002FNTLMv2 Credential Theft\u002FLocal File Read in static resource handler on Windows",[4473,4474],"CVE-2026-34515","PYSEC-2026-2097",[204,4474],"2026-04-01T21:16:59.570Z","2026-07-13T07:26:55.790859426Z",[4479,4480],{"type":1732,"score":3923},{"type":1660,"score":2616},[4482,4484,4486,4488,4489],{"type":1669,"url":4483},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-p998-jp59-783m",{"type":1664,"url":4485},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34515",{"type":1669,"url":4487},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0ae2aa076c84573df83fc1fdc39eec0f5862fe3d",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":205,"slug":4492,"dossier":45,"summary":4493,"aliases":4494,"sourceIds":4498,"published":4499,"modified":4500,"checkedAt":7,"severity":4501,"references":4504,"versionKeys":4517,"packageCount":32,"repositoryCount":34},"ghsa-pg7v-jwj7-p798-7c77aab5","Pillow EpsImagePlugin negative %%BeginBinary byte count causes infinite loop denial of service",[4495,4496,4497],"BIT-pillow-2026-59203","CVE-2026-59203","PYSEC-2026-3452",[205,4497],"2026-07-14T16:17:02.063Z","2026-07-22T02:59:40.501589790Z",[4502,4503],{"type":1660,"score":1890},{"type":1660,"score":1735},[4505,4507,4509,4511,4513,4515,4516],{"type":1708,"url":4506},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pg7v-jwj7-p798",{"type":1664,"url":4508},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59203",{"type":1669,"url":4510},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9708",{"type":1669,"url":4512},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F03992618118b4a76b6163cd72ab5ecd684133b83",{"type":1675,"url":4514},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-3452.yaml",{"type":1672,"url":2004},{"type":1664,"url":2470},[2013,2014,2015],{"id":206,"slug":4519,"dossier":45,"summary":4520,"aliases":4521,"sourceIds":4524,"published":4130,"modified":4525,"checkedAt":7,"severity":4526,"references":4529,"versionKeys":4542,"packageCount":32,"repositoryCount":480},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[4522,4523],"CVE-2025-3777","PYSEC-2026-1986",[206,4523],"2026-07-07T17:56:47.225461188Z",[4527],{"type":1660,"score":4528},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[4530,4532,4534,4535,4537,4539,4540],{"type":1664,"url":4531},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":1675,"url":4533},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":1672,"url":1706},{"type":1675,"url":4536},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":1675,"url":4538},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":1672,"url":1902},{"type":1664,"url":4541},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[1713,1714],{"id":207,"slug":4544,"dossier":89,"summary":4545,"aliases":4546,"sourceIds":4550,"published":4551,"modified":4552,"checkedAt":7,"severity":4553,"references":4555,"versionKeys":4566,"packageCount":32,"repositoryCount":1835},"ghsa-phj9-mv4w-65pm-481e7dc3","Pillow `GdImageFile._open()`: image dimensions accepted without `_decompression_bomb_check()`",[4547,4548,4549],"BIT-pillow-2026-55380","CVE-2026-55380","PYSEC-2026-2256",[207,4549],"2026-07-06T19:17:08.703Z","2026-07-22T02:59:41.562749940Z",[4554],{"type":1660,"score":1735},[4556,4558,4560,4562,4564,4565],{"type":1708,"url":4557},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-phj9-mv4w-65pm",{"type":1664,"url":4559},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55380",{"type":1669,"url":4561},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Ff39b0ae6624eb2d7c5c5d651d9bb5fdbd96a8675",{"type":1675,"url":4563},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-2256.yaml",{"type":1672,"url":2004},{"type":1664,"url":2006},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":208,"slug":4568,"dossier":45,"summary":4569,"aliases":4570,"sourceIds":4573,"published":4574,"modified":4575,"checkedAt":7,"severity":4576,"references":4578,"versionKeys":4590,"packageCount":32,"repositoryCount":431},"ghsa-pq67-6m6q-mj2v-3522d1d4","urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation",[4571,4572],"CVE-2025-50181","PYSEC-2026-1999",[208,4572],"2025-06-18T17:50:00Z","2026-07-07T17:56:41.872294653Z",[4577],{"type":1660,"score":2063},[4579,4581,4583,4585,4586,4587,4588],{"type":1675,"url":4580},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",{"type":1664,"url":4582},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-50181",{"type":1669,"url":4584},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fcommit\u002Ff05b1329126d5be6de501f9d1e3e36738bc08857",{"type":1672,"url":1824},{"type":1675,"url":2073},{"type":1672,"url":1826},{"type":1664,"url":4589},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pq67-6m6q-mj2v",[1830,1831,1832,1833],{"id":209,"slug":4592,"dossier":89,"summary":4593,"aliases":4594,"sourceIds":4598,"published":4599,"modified":4600,"checkedAt":7,"severity":4601,"references":4604,"versionKeys":4616,"packageCount":32,"repositoryCount":1835},"ghsa-pwv6-vv43-88gr-c5f811d0","Pillow has an OOB Write with Invalid PSD Tile Extents (Integer Overflow)",[4595,4596,4597],"BIT-pillow-2026-42311","CVE-2026-42311","PYSEC-2026-2252",[209,4597],"2026-05-04T20:20:31Z","2026-07-13T07:26:52.198871129Z",[4602,4603],{"type":1732,"score":3287},{"type":1660,"score":2664},[4605,4606,4608,4610,4612,4614,4615],{"type":1675,"url":3291},{"type":1669,"url":4607},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-pwv6-vv43-88gr",{"type":1664,"url":4609},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42311",{"type":1669,"url":4611},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9520",{"type":1669,"url":4613},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F58f9a1d166dcb0c274807d4423522d205b0c35ea",{"type":1672,"url":2004},{"type":1664,"url":2444},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":210,"slug":4618,"dossier":45,"summary":4619,"aliases":4620,"sourceIds":4623,"published":4130,"modified":4624,"checkedAt":7,"severity":4625,"references":4627,"versionKeys":4638,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[4621,4622],"CVE-2025-3263","PYSEC-2026-1987",[210,4622],"2026-07-07T17:56:57.889099913Z",[4626],{"type":1660,"score":2127},[4628,4630,4631,4632,4633,4635,4636],{"type":1664,"url":4629},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":1675,"url":4138},{"type":1675,"url":4140},{"type":1672,"url":1706},{"type":1675,"url":4634},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":1672,"url":1902},{"type":1664,"url":4637},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[1713],{"id":211,"slug":4640,"dossier":45,"summary":4641,"aliases":4642,"sourceIds":4645,"published":4646,"modified":4647,"checkedAt":7,"severity":4648,"references":4651,"versionKeys":4664,"packageCount":32,"repositoryCount":32},"ghsa-q2x7-8rv6-6q7h-1113a288","Jinja has a sandbox breakout through indirect reference to format method",[4643,4644],"CVE-2024-56326","PYSEC-2026-1475",[211,4644],"2024-12-23T17:56:08Z","2026-07-07T17:56:44.376174317Z",[4649,4650],{"type":1660,"score":2895},{"type":1732,"score":3339},[4652,4654,4656,4658,4659,4660,4661,4662],{"type":1675,"url":4653},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fsecurity\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",{"type":1664,"url":4655},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-56326",{"type":1669,"url":4657},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fjinja\u002Fcommit\u002F48b0687e05a5466a91cd5812d604fa37ad0943b4",{"type":1672,"url":3348},{"type":1675,"url":3763},{"type":1675,"url":3350},{"type":1672,"url":3354},{"type":1664,"url":4663},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2x7-8rv6-6q7h",[3358],{"id":212,"slug":4666,"dossier":89,"summary":4667,"aliases":4668,"sourceIds":4671,"published":4672,"modified":4673,"checkedAt":7,"severity":4674,"references":4678,"versionKeys":4684,"packageCount":32,"repositoryCount":3693},"ghsa-qccp-gfcp-xxvc-0d988969","urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",[4669,4670],"CVE-2026-44431","PYSEC-2026-141",[212,4670],"2026-05-11T14:51:20Z","2026-05-20T09:19:20.983812Z",[4675,4676],{"type":1660,"score":3096},{"type":1732,"score":4677},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[4679,4681,4683],{"type":1664,"url":4680},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fsecurity\u002Fadvisories\u002FGHSA-qccp-gfcp-xxvc",{"type":1664,"url":4682},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44431",{"type":1672,"url":1824},[1830,1831,1832,1833,1834,4311],{"id":213,"slug":4686,"dossier":45,"summary":4687,"aliases":4688,"sourceIds":4692,"published":4693,"modified":4694,"checkedAt":7,"severity":4695,"references":4699,"versionKeys":4717,"packageCount":32,"repositoryCount":1752},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[4689,4690,4691],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[213],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[4696,4697],{"type":1660,"score":2181},{"type":1732,"score":4698},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[4700,4702,4704,4706,4708,4710,4711,4713,4715],{"type":1664,"url":4701},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":1675,"url":4703},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":1675,"url":4705},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":1675,"url":4707},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":1675,"url":4709},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":1672,"url":1864},{"type":1675,"url":4712},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":1675,"url":4714},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":1675,"url":4716},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[1876,1877,1878,2956,2957,4718,4719,4720],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",{"id":214,"slug":4722,"dossier":45,"summary":4723,"aliases":4724,"sourceIds":4727,"published":4728,"modified":4729,"checkedAt":7,"severity":4730,"references":4733,"versionKeys":4748,"packageCount":32,"repositoryCount":40},"ghsa-qmgc-5h2g-mvrw-199eacc8","filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock",[4725,4726],"CVE-2026-22701","PYSEC-2026-1374",[214,4726],"2026-01-13T18:44:55Z","2026-07-07T17:56:19.485233787Z",[4731],{"type":1660,"score":4732},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[4734,4736,4738,4740,4742,4744,4746],{"type":1675,"url":4735},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",{"type":1664,"url":4737},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22701",{"type":1675,"url":4739},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F255ed068bc85d1ef406e50a135e1459170dd1bf0",{"type":1675,"url":4741},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F41b42dd2c72aecf7da83dbda5903b8087dddc4d5",{"type":1672,"url":4743},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock",{"type":1672,"url":4745},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ffilelock",{"type":1664,"url":4747},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qmgc-5h2g-mvrw",[4749,4750,4751,4752],"pypi:filelock@3.16.1","pypi:filelock@3.18.0","pypi:filelock@3.19.1","pypi:filelock@3.20.0",{"id":215,"slug":4754,"dossier":45,"summary":4755,"aliases":4756,"sourceIds":4759,"published":4760,"modified":4761,"checkedAt":7,"severity":4762,"references":4765,"versionKeys":4779,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[4757,4758],"CVE-2025-2099","PYSEC-2025-40",[215,4758],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[4763,4764],{"type":1660,"score":2127},{"type":1660,"score":1735},[4766,4768,4770,4772,4773,4775,4777],{"type":1664,"url":4767},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":1675,"url":4769},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":1669,"url":4771},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":1672,"url":1706},{"type":1675,"url":4774},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":1675,"url":4776},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":1664,"url":4778},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[1713],{"id":216,"slug":4781,"dossier":45,"summary":4782,"aliases":4783,"sourceIds":4786,"published":4787,"modified":4788,"checkedAt":7,"severity":4789,"references":4792,"versionKeys":4801,"packageCount":32,"repositoryCount":461},"ghsa-qvv7-cg9c-w4x3-da2ef5e7","Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download \u002F nltk.data.load) defeats ENFORCE mode",[4784,4785],"CVE-2026-12075","PYSEC-2026-3583",[216,4785],"2026-07-31T16:51:29Z","2026-08-06T15:11:52.346921403Z",[4790],{"type":1660,"score":4791},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:N\u002FA:N",[4793,4795,4796,4797,4799],{"type":1675,"url":4794},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":1672,"url":2036},{"type":1672,"url":2694},{"type":1664,"url":4798},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qvv7-cg9c-w4x3",{"type":1664,"url":4800},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12075",[2050,2051],{"id":217,"slug":4803,"dossier":45,"summary":4012,"aliases":4804,"sourceIds":4807,"published":4808,"modified":4809,"checkedAt":7,"severity":4810,"references":4814,"versionKeys":4828,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[4805,4806],"CVE-2024-11392","PYSEC-2024-227",[217,4806],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[4811,4813],{"type":1660,"score":4812},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":1660,"score":3402},[4815,4817,4818,4819,4820,4822,4824,4826],{"type":1664,"url":4816},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":1675,"url":4027},{"type":1675,"url":4029},{"type":1672,"url":1706},{"type":1675,"url":4821},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":1675,"url":4823},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":1664,"url":4825},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":1664,"url":4827},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[1713],{"id":218,"slug":4830,"dossier":45,"summary":4831,"aliases":4832,"sourceIds":4836,"published":4837,"modified":4838,"checkedAt":7,"severity":4839,"references":4842,"versionKeys":4856,"packageCount":32,"repositoryCount":1835},"ghsa-r73j-pqj5-w3x7-8d4d543f","Pillow has a PDF Parsing Trailer Infinite Loop (DoS)",[4833,4834,4835],"BIT-pillow-2026-42310","CVE-2026-42310","PYSEC-2026-2874",[218,4835],"2026-05-04T20:19:30Z","2026-07-13T16:42:37.358429541Z",[4840,4841],{"type":1660,"score":1852},{"type":1732,"score":2436},[4843,4845,4847,4849,4851,4852,4853,4854],{"type":1675,"url":4844},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",{"type":1664,"url":4846},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42310",{"type":1675,"url":4848},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9519",{"type":1675,"url":4850},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3bf614e4b8615d0ce1d5039efaf6db447fe7c468",{"type":1672,"url":2004},{"type":1675,"url":2444},{"type":1672,"url":2472},{"type":1664,"url":4855},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-r73j-pqj5-w3x7",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":219,"slug":4858,"dossier":45,"summary":4859,"aliases":4860,"sourceIds":4863,"published":4864,"modified":4865,"checkedAt":7,"severity":4866,"references":4868,"versionKeys":4883,"packageCount":32,"repositoryCount":480},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[4861,4862],"CVE-2025-6051","PYSEC-2026-1988",[219,4862],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[4867],{"type":1660,"score":2127},[4869,4871,4873,4875,4877,4878,4880,4881],{"type":1664,"url":4870},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":1675,"url":4872},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":1675,"url":4874},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":1675,"url":4876},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":1672,"url":1706},{"type":1675,"url":4879},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":1672,"url":1902},{"type":1664,"url":4882},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[1713,1714],{"id":220,"slug":4885,"dossier":45,"summary":4886,"aliases":4887,"sourceIds":4888,"published":4889,"modified":4890,"checkedAt":7,"severity":4891,"references":4893,"versionKeys":4897,"packageCount":32,"repositoryCount":461},"ghsa-rf74-v2fm-23pw-dfe729f1","Natural Language Toolkit (NLTK) has unbounded recursion in JSONTaggedDecoder.decode_obj() may cause DoS",[],[220],"2026-03-18T20:17:43Z","2026-03-25T23:29:13.324989Z",[4892],{"type":1732,"score":2436},[4894,4896],{"type":1675,"url":4895},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-rf74-v2fm-23pw",{"type":1672,"url":2036},[2050,2051],{"id":221,"slug":4899,"dossier":45,"summary":4900,"aliases":4901,"sourceIds":4904,"published":4905,"modified":4906,"checkedAt":7,"severity":4907,"references":4910,"versionKeys":4923,"packageCount":32,"repositoryCount":40},"ghsa-rgxp-2hwp-jwgg-76cdda06","Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering",[4902,4903],"CVE-2026-25087","PYSEC-2026-113",[221,4903],"2026-02-17T14:16:01.947Z","2026-06-12T10:29:15.451071539Z",[4908],{"type":1660,"score":4909},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:H",[4911,4913,4915,4917,4919,4921],{"type":1664,"url":4912},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-25087",{"type":1669,"url":4914},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow\u002Fpull\u002F48925",{"type":1672,"url":4916},"https:\u002F\u002Fgithub.com\u002Fapache\u002Farrow",{"type":1675,"url":4918},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpyarrow\u002FPYSEC-2026-113.yaml",{"type":1664,"url":4920},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Fmpm4ld1qony30tchfpjtk5b11tcyvmwh",{"type":1664,"url":4922},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rgxp-2hwp-jwgg",[4924,4925,4926,4927],"pypi:pyarrow@18.1.0","pypi:pyarrow@20.0.0","pypi:pyarrow@21.0.0","pypi:pyarrow@22.0.0",{"id":222,"slug":4929,"dossier":45,"summary":4930,"aliases":4931,"sourceIds":4935,"published":3430,"modified":4936,"checkedAt":7,"severity":4937,"references":4940,"versionKeys":4958,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[4932,4933,4934],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[222],"2026-07-17T17:15:51.452848951Z",[4938,4939],{"type":1660,"score":2181},{"type":1732,"score":4698},[4941,4943,4945,4947,4949,4951,4952,4954,4956],{"type":1664,"url":4942},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":1675,"url":4944},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":1675,"url":4946},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":1675,"url":4948},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":1675,"url":4950},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":1672,"url":1864},{"type":1675,"url":4953},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":1675,"url":4955},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":1675,"url":4957},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[4959,1876,1877,1878,2956,2957,4718,4719,4720],"pypi:torch@2.10.0",{"id":223,"slug":4961,"dossier":45,"summary":4962,"aliases":4963,"sourceIds":4966,"published":4967,"modified":4968,"checkedAt":7,"severity":4969,"references":4971,"versionKeys":4984,"packageCount":32,"repositoryCount":441},"ghsa-vfmq-68hx-4jfw-7287cb04","lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files",[4964,4965],"CVE-2026-41066","PYSEC-2026-87",[223,4965],"2026-04-21T20:38:44Z","2026-06-06T01:15:07.932706387Z",[4970],{"type":1660,"score":2616},[4972,4974,4976,4978,4980,4982],{"type":1664,"url":4973},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Fsecurity\u002Fadvisories\u002FGHSA-vfmq-68hx-4jfw",{"type":1664,"url":4975},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-41066",{"type":1857,"url":4977},"https:\u002F\u002Fbugs.launchpad.net\u002Flxml\u002F+bug\u002F2146291",{"type":1672,"url":4979},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml",{"type":1675,"url":4981},"https:\u002F\u002Fgithub.com\u002Flxml\u002Flxml\u002Freleases\u002Ftag\u002Flxml-6.1.0",{"type":1675,"url":4983},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Flxml\u002FPYSEC-2026-87.yaml",[4985,4986,4987],"pypi:lxml@5.3.0","pypi:lxml@5.4.0","pypi:lxml@6.0.2",{"id":224,"slug":4989,"dossier":45,"summary":4990,"aliases":4991,"sourceIds":4995,"published":3430,"modified":4996,"checkedAt":7,"severity":4997,"references":5000,"versionKeys":5015,"packageCount":32,"repositoryCount":1720},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[4992,4993,4994],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[224],"2026-06-10T17:41:15.774477397Z",[4998,4999],{"type":1660,"score":2181},{"type":1732,"score":3435},[5001,5003,5004,5005,5006,5008,5009,5011,5013],{"type":1664,"url":5002},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":1675,"url":3440},{"type":1675,"url":3442},{"type":1675,"url":3444},{"type":1675,"url":5007},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":1672,"url":1864},{"type":1675,"url":5010},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":1675,"url":5012},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":1675,"url":5014},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[1876,1877,1878,2956,2957,4718],{"id":225,"slug":5017,"dossier":45,"summary":5018,"aliases":5019,"sourceIds":5023,"published":5024,"modified":5025,"checkedAt":7,"severity":5026,"references":5029,"versionKeys":5043,"packageCount":32,"repositoryCount":1835},"ghsa-vjc4-5qp5-m44j-08063b19","Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service",[5020,5021,5022],"BIT-pillow-2026-59204","CVE-2026-59204","PYSEC-2026-3496",[225,5022],"2026-07-20T23:18:32Z","2026-07-23T15:11:20.720915099Z",[5027],{"type":1732,"score":5028},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",[5030,5032,5034,5036,5038,5039,5040,5041],{"type":1675,"url":5031},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",{"type":1664,"url":5033},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59204",{"type":1675,"url":5035},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9704",{"type":1675,"url":5037},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F13ada41172142f2fd9f0906f615a00ea623a11ca",{"type":1672,"url":2004},{"type":1675,"url":2470},{"type":1672,"url":2472},{"type":1664,"url":5042},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vjc4-5qp5-m44j",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":226,"slug":5045,"dossier":45,"summary":5046,"aliases":5047,"sourceIds":5050,"published":5051,"modified":5052,"checkedAt":7,"severity":5053,"references":5056,"versionKeys":5069,"packageCount":32,"repositoryCount":461},"ghsa-vqfr-h8mv-ghfj-49515033","h11 accepts some malformed Chunked-Encoding bodies",[5048,5049],"CVE-2025-43859","PYSEC-2026-348",[226,5049],"2025-04-24T16:07:56Z","2026-07-01T20:22:54.082067Z",[5054],{"type":1660,"score":5055},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",[5057,5059,5061,5063,5065,5067],{"type":1675,"url":5058},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fsecurity\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",{"type":1664,"url":5060},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43859",{"type":1675,"url":5062},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11\u002Fcommit\u002F114803a29ce50116dc47951c690ad4892b1a36ed",{"type":1672,"url":5064},"https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fh11",{"type":1672,"url":5066},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fh11",{"type":1664,"url":5068},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-vqfr-h8mv-ghfj",[5070],"pypi:h11@0.14.0",{"id":227,"slug":5072,"dossier":45,"summary":5073,"aliases":5074,"sourceIds":5077,"published":5078,"modified":5079,"checkedAt":7,"severity":5080,"references":5084,"versionKeys":5093,"packageCount":32,"repositoryCount":1752},"ghsa-w2fm-2cpv-w7v5-c2f7701a","aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage",[5075,5076],"CVE-2026-22815","PYSEC-2026-2094",[227,5076],"2026-04-01T19:45:17Z","2026-07-13T07:26:28.950069528Z",[5081,5082],{"type":1732,"score":2588},{"type":1732,"score":5083},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",[5085,5087,5089,5091,5092],{"type":1669,"url":5086},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-w2fm-2cpv-w7v5",{"type":1664,"url":5088},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-22815",{"type":1669,"url":5090},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F0c2e9da51126238a421568eb7c5b53e5b5d17b36",{"type":1672,"url":1740},{"type":1664,"url":1776},[1744,1745,1746,1747,1748,1749,1750,1751],{"id":228,"slug":5095,"dossier":45,"summary":5096,"aliases":5097,"sourceIds":5100,"published":5101,"modified":5102,"checkedAt":7,"severity":5103,"references":5106,"versionKeys":5123,"packageCount":32,"repositoryCount":40},"ghsa-w853-jp5j-5j7f-2786386f","filelock has a TOCTOU race condition which allows symlink attacks during lock file creation",[5098,5099],"CVE-2025-68146","PYSEC-2026-1375",[228,5099],"2025-12-16T20:52:55Z","2026-07-07T17:56:10.949145470Z",[5104],{"type":1660,"score":5105},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5107,5109,5111,5112,5114,5116,5118,5119,5121],{"type":1675,"url":5108},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fsecurity\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1675,"url":5110},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Fcommit\u002F4724d7f8c3393ec1f048c93933e6e3e6ec321f0e",{"type":1672,"url":4743},{"type":1675,"url":5113},"https:\u002F\u002Fgithub.com\u002Ftox-dev\u002Ffilelock\u002Freleases\u002Ftag\u002F3.20.1",{"type":1675,"url":5115},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Ffileio\u002Ffile-attribute-constants",{"type":1675,"url":5117},"https:\u002F\u002Fpubs.opengroup.org\u002Fonlinepubs\u002F9699919799\u002Ffunctions\u002Fopen.html",{"type":1672,"url":4745},{"type":1664,"url":5120},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-w853-jp5j-5j7f",{"type":1664,"url":5122},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68146",[4749,4750,4751,4752],{"id":229,"slug":5125,"dossier":45,"summary":5126,"aliases":5127,"sourceIds":5131,"published":5132,"modified":5133,"checkedAt":7,"severity":5134,"references":5137,"versionKeys":5175,"packageCount":32,"repositoryCount":1835},"ghsa-whj4-6x5x-4v2j-eb5fc6a1","FITS GZIP decompression bomb in Pillow",[5128,5129,5130],"BIT-pillow-2026-40192","CVE-2026-40192","PYSEC-2026-2250",[229,5130],"2026-04-13T19:22:35Z","2026-07-13T07:26:24.246094941Z",[5135,5136],{"type":1660,"score":1735},{"type":1732,"score":5028},[5138,5140,5142,5144,5146,5147,5149,5151,5153,5155,5157,5159,5160,5162,5164,5166,5167,5169,5171,5173],{"type":1675,"url":5139},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-whj4-6x5x-4v2j",{"type":1664,"url":5141},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40192",{"type":1675,"url":5143},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9521",{"type":1675,"url":5145},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002F3cb854e8b2bab43f40e342e665f9340d861aa628",{"type":1672,"url":2004},{"type":1675,"url":5148},"https:\u002F\u002Fpillow.readthedocs.io\u002Fen\u002Fstable\u002Freleasenotes\u002F12.2.0.html#prevent-fits-decompression-bomb",{"type":1675,"url":5150},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-40192",{"type":1675,"url":5152},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-40192.json",{"type":1664,"url":5154},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16008",{"type":1664,"url":5156},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16009",{"type":1664,"url":5158},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:16030",{"type":1664,"url":3313},{"type":1664,"url":5161},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17609",{"type":1664,"url":5163},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:17611",{"type":1664,"url":5165},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:19375",{"type":1664,"url":2044},{"type":1664,"url":5168},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:21017",{"type":1664,"url":5170},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22465",{"type":1664,"url":5172},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22629",{"type":1664,"url":5174},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:22840",[2008,2009,2010,2011,2012,2013,2014,2015],{"id":230,"slug":5177,"dossier":45,"summary":5178,"aliases":5179,"sourceIds":5183,"published":5184,"modified":5185,"checkedAt":7,"severity":5186,"references":5189,"versionKeys":5198,"packageCount":32,"repositoryCount":1835},"ghsa-wjx4-4jcj-g98j-e937161b","Pillow has an integer overflow when processing fonts",[5180,5181,5182],"BIT-pillow-2026-42308","CVE-2026-42308","PYSEC-2026-165",[230,5182],"2026-05-04T20:18:45Z","2026-06-08T23:45:16.414580348Z",[5187,5188],{"type":1660,"score":1852},{"type":1732,"score":2436},[5190,5192,5194,5196,5197],{"type":1664,"url":5191},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-wjx4-4jcj-g98j",{"type":1664,"url":5193},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-42308",{"type":1675,"url":5195},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2026-165.yaml",{"type":1672,"url":2004},{"type":1664,"url":2444},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":231,"slug":5200,"dossier":45,"summary":4012,"aliases":5201,"sourceIds":5204,"published":4017,"modified":5205,"checkedAt":7,"severity":5206,"references":5209,"versionKeys":5223,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[5202,5203],"CVE-2024-11393","PYSEC-2024-228",[231,5203],"2026-06-10T17:00:13.252500033Z",[5207,5208],{"type":1660,"score":4021},{"type":1660,"score":3402},[5210,5212,5213,5214,5215,5217,5219,5221],{"type":1664,"url":5211},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":1675,"url":4027},{"type":1675,"url":4029},{"type":1672,"url":1706},{"type":1675,"url":5216},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":1675,"url":5218},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":1664,"url":5220},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":1664,"url":5222},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[1713],{"id":232,"slug":5225,"dossier":45,"summary":5226,"aliases":5227,"sourceIds":5231,"published":5232,"modified":5233,"checkedAt":7,"severity":5234,"references":5239,"versionKeys":5255,"packageCount":32,"repositoryCount":480},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[5228,5229,5230],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[232],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[5235,5237],{"type":1660,"score":5236},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":1732,"score":5238},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[5240,5242,5244,5246,5248,5249,5251,5253],{"type":1664,"url":5241},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":1675,"url":5243},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":1675,"url":5245},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":1675,"url":5247},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":1672,"url":1864},{"type":1675,"url":5250},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":1675,"url":5252},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":1675,"url":5254},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[1876,1877],{"id":233,"slug":5257,"dossier":45,"summary":5258,"aliases":5259,"sourceIds":5262,"published":5263,"modified":5264,"checkedAt":7,"severity":5265,"references":5268,"versionKeys":5274,"packageCount":32,"repositoryCount":1752},"ghsa-xcgm-r5h9-7989-77bcbc26","aiohttp: Incomplete websocket frame payloads bypass memory limits",[5260,5261],"CVE-2026-54274","PYSEC-2026-2108",[233,5261],"2026-06-15T20:11:22Z","2026-07-13T07:26:54.330692251Z",[5266,5267],{"type":1732,"score":2089},{"type":1660,"score":1735},[5269,5271,5272],{"type":1664,"url":5270},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fsecurity\u002Fadvisories\u002FGHSA-xcgm-r5h9-7989",{"type":1672,"url":1740},{"type":1669,"url":5273},"https:\u002F\u002Fgithub.com\u002Faio-libs\u002Faiohttp\u002Fcommit\u002F14b6ee851fb16ec199acb950de0c82d476799e7d",[1744,1745,1746,1747,1748,1749,1750,1751],{"id":234,"slug":5276,"dossier":45,"summary":5277,"aliases":5278,"sourceIds":5282,"published":5283,"modified":5284,"checkedAt":7,"severity":5285,"references":5288,"versionKeys":5302,"packageCount":32,"repositoryCount":34},"ghsa-xg8h-j46f-w952-da36a616","Pillow vulnerability can cause write buffer overflow on BCn encoding",[5279,5280,5281],"BIT-pillow-2025-48379","CVE-2025-48379","PYSEC-2025-61",[234,5281],"2025-07-01T17:29:37Z","2026-02-04T03:49:31.268130Z",[5286],{"type":1660,"score":5287},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",[5289,5291,5293,5295,5297,5299,5300],{"type":1664,"url":5290},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xg8h-j46f-w952",{"type":1664,"url":5292},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-48379",{"type":1675,"url":5294},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9041",{"type":1669,"url":5296},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fef98b3510e3e4f14b547762764813d7e5ca3c5a4",{"type":1675,"url":5298},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fpillow\u002FPYSEC-2025-61.yaml",{"type":1672,"url":2004},{"type":1675,"url":5301},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Freleases\u002Ftag\u002F11.3.0",[2011],{"id":235,"slug":5304,"dossier":45,"summary":5305,"aliases":5306,"sourceIds":5309,"published":5310,"modified":5311,"checkedAt":7,"severity":5312,"references":5314,"versionKeys":5323,"packageCount":32,"repositoryCount":461},"ghsa-xh95-f55m-82fw-6e557f3c","Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)",[5307,5308],"CVE-2026-12074","PYSEC-2026-3584",[235,5308],"2026-07-31T16:50:41Z","2026-08-06T15:11:52.598451868Z",[5313],{"type":1660,"score":2616},[5315,5317,5318,5319,5321],{"type":1675,"url":5316},"https:\u002F\u002Fgithub.com\u002Fnltk\u002Fnltk\u002Fsecurity\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":1672,"url":2036},{"type":1672,"url":2694},{"type":1664,"url":5320},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xh95-f55m-82fw",{"type":1664,"url":5322},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-12074",[2050,2051],{"id":236,"slug":5325,"dossier":45,"summary":5326,"aliases":5327,"sourceIds":5331,"published":5332,"modified":5333,"checkedAt":7,"severity":5334,"references":5337,"versionKeys":5348,"packageCount":32,"repositoryCount":1835},"ghsa-xj96-63gp-2gmr-85e1cf15","Pillow: Heap out-of-bounds write in `ImageFilter.RankFilter` via integer overflow in `ImagingExpand`",[5328,5329,5330],"BIT-pillow-2026-59197","CVE-2026-59197","PYSEC-2026-3454",[236,5330],"2026-07-14T17:17:14.487Z","2026-07-22T11:11:36.231472645Z",[5335],{"type":1660,"score":5336},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:H",[5338,5340,5342,5344,5346,5347],{"type":1708,"url":5339},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fsecurity\u002Fadvisories\u002FGHSA-xj96-63gp-2gmr",{"type":1664,"url":5341},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-59197",{"type":1669,"url":5343},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fpull\u002F9695",{"type":1669,"url":5345},"https:\u002F\u002Fgithub.com\u002Fpython-pillow\u002FPillow\u002Fcommit\u002Fcce3bdb867c77a3420261ed1bfdb6b0787ec8fc1",{"type":1672,"url":2004},{"type":1664,"url":2470},[2008,2009,2010,2011,2012,2013,2014,2015],{"id":237,"slug":5350,"dossier":45,"summary":289,"aliases":5351,"sourceIds":5354,"published":5355,"modified":5356,"checkedAt":7,"severity":5357,"references":5359,"versionKeys":5368,"packageCount":32,"repositoryCount":480},"pysec-2025-198-62b25ed4",[5352,5353],"BIT-pytorch-2025-46148","CVE-2025-46148",[237],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[5358],{"type":1660,"score":3096},[5360,5362,5364,5366],{"type":1664,"url":5361},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":1664,"url":5363},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":1857,"url":5365},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":1669,"url":5367},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[1876,1877],{"id":238,"slug":5370,"dossier":45,"summary":289,"aliases":5371,"sourceIds":5374,"published":5375,"modified":5376,"checkedAt":7,"severity":5377,"references":5379,"versionKeys":5385,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[5372,5373],"BIT-pytorch-2025-46149","CVE-2025-46149",[238],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[5378],{"type":1660,"score":3096},[5380,5381,5383],{"type":1664,"url":5361},{"type":1857,"url":5382},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":1669,"url":5384},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[1877],{"id":239,"slug":5387,"dossier":45,"summary":289,"aliases":5388,"sourceIds":5391,"published":5392,"modified":5393,"checkedAt":7,"severity":5394,"references":5396,"versionKeys":5404,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[5389,5390],"BIT-pytorch-2025-46150","CVE-2025-46150",[239],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[5395],{"type":1660,"score":3096},[5397,5398,5400,5402],{"type":1664,"url":5361},{"type":1857,"url":5399},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":1857,"url":5401},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":1669,"url":5403},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[1877],{"id":240,"slug":5406,"dossier":45,"summary":289,"aliases":5407,"sourceIds":5410,"published":5411,"modified":5412,"checkedAt":7,"severity":5413,"references":5415,"versionKeys":5421,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[5408,5409],"BIT-pytorch-2025-46152","CVE-2025-46152",[240],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[5414],{"type":1660,"score":1890},[5416,5417,5419],{"type":1664,"url":5361},{"type":1857,"url":5418},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":1669,"url":5420},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[1877],{"id":241,"slug":5423,"dossier":45,"summary":289,"aliases":5424,"sourceIds":5427,"published":5428,"modified":5429,"checkedAt":7,"severity":5430,"references":5432,"versionKeys":5442,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[5425,5426],"BIT-pytorch-2025-46153","CVE-2025-46153",[241],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[5431],{"type":1660,"score":3096},[5433,5435,5436,5438,5440],{"type":1675,"url":5434},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":1664,"url":5361},{"type":1664,"url":5437},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":1857,"url":5439},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":1669,"url":5441},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[1877],{"id":242,"slug":5444,"dossier":45,"summary":289,"aliases":5445,"sourceIds":5448,"published":5449,"modified":5450,"checkedAt":7,"severity":5451,"references":5453,"versionKeys":5458,"packageCount":32,"repositoryCount":1720},"pysec-2025-203-2febb201",[5446,5447],"BIT-pytorch-2025-55551","CVE-2025-55551",[242],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[5452],{"type":1660,"score":1735},[5454,5456],{"type":1664,"url":5455},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":1857,"url":5457},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[1876,1877,1878,2956,2957,4718],{"id":243,"slug":5460,"dossier":45,"summary":289,"aliases":5461,"sourceIds":5464,"published":5465,"modified":5466,"checkedAt":7,"severity":5467,"references":5469,"versionKeys":5473,"packageCount":32,"repositoryCount":1720},"pysec-2025-204-cdae47da",[5462,5463],"BIT-pytorch-2025-55552","CVE-2025-55552",[243],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[5468],{"type":1660,"score":1735},[5470,5471],{"type":1664,"url":5455},{"type":1857,"url":5472},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[1876,1877,1878,2956,2957,4718],{"id":244,"slug":5475,"dossier":45,"summary":289,"aliases":5476,"sourceIds":5479,"published":5480,"modified":5481,"checkedAt":7,"severity":5482,"references":5484,"versionKeys":5490,"packageCount":32,"repositoryCount":461},"pysec-2025-205-fd5e58fd",[5477,5478],"BIT-pytorch-2025-55553","CVE-2025-55553",[244],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[5483],{"type":1660,"score":1735},[5485,5486,5488],{"type":1664,"url":5455},{"type":1857,"url":5487},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":1669,"url":5489},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[1876,1877,1878],{"id":245,"slug":5492,"dossier":45,"summary":289,"aliases":5493,"sourceIds":5496,"published":5497,"modified":5498,"checkedAt":7,"severity":5499,"references":5501,"versionKeys":5505,"packageCount":32,"repositoryCount":1720},"pysec-2025-206-58322476",[5494,5495],"BIT-pytorch-2025-55554","CVE-2025-55554",[245],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[5500],{"type":1660,"score":1890},[5502,5503],{"type":1664,"url":5455},{"type":1857,"url":5504},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[1876,1877,1878,2956,2957,4718],{"id":246,"slug":5507,"dossier":45,"summary":289,"aliases":5508,"sourceIds":5511,"published":5512,"modified":5513,"checkedAt":7,"severity":5514,"references":5516,"versionKeys":5522,"packageCount":32,"repositoryCount":461},"pysec-2025-207-2abef3fc",[5509,5510],"BIT-pytorch-2025-55557","CVE-2025-55557",[246],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[5515],{"type":1660,"score":1735},[5517,5518,5520],{"type":1664,"url":5455},{"type":1857,"url":5519},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":1669,"url":5521},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[1876,1877,1878],{"id":247,"slug":5524,"dossier":45,"summary":289,"aliases":5525,"sourceIds":5528,"published":5529,"modified":5530,"checkedAt":7,"severity":5531,"references":5533,"versionKeys":5539,"packageCount":32,"repositoryCount":461},"pysec-2025-208-6e93fe9d",[5526,5527],"BIT-pytorch-2025-55558","CVE-2025-55558",[247],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[5532],{"type":1660,"score":1735},[5534,5535,5537],{"type":1664,"url":5455},{"type":1857,"url":5536},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":1669,"url":5538},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[1876,1877,1878],{"id":248,"slug":5541,"dossier":45,"summary":289,"aliases":5542,"sourceIds":5545,"published":5546,"modified":5547,"checkedAt":7,"severity":5548,"references":5550,"versionKeys":5556,"packageCount":32,"repositoryCount":461},"pysec-2025-209-e6f352b0",[5543,5544],"BIT-pytorch-2025-55560","CVE-2025-55560",[248],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[5549],{"type":1660,"score":1735},[5551,5552,5554],{"type":1664,"url":5455},{"type":1857,"url":5553},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":1669,"url":5555},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[1876,1877,1878],{"id":249,"slug":5558,"dossier":45,"summary":289,"aliases":5559,"sourceIds":5561,"published":5562,"modified":5563,"checkedAt":7,"severity":5564,"references":5566,"versionKeys":5569,"packageCount":32,"repositoryCount":461},"pysec-2025-211-d8bd15de",[5560],"CVE-2025-14920",[249],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[5565],{"type":1660,"score":1699},[5567],{"type":1664,"url":5568},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[1713,1714,1715],{"id":250,"slug":5571,"dossier":45,"summary":289,"aliases":5572,"sourceIds":5574,"published":5575,"modified":5576,"checkedAt":7,"severity":5577,"references":5579,"versionKeys":5582,"packageCount":32,"repositoryCount":461},"pysec-2025-212-a011b97d",[5573],"CVE-2025-14921",[250],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[5578],{"type":1660,"score":1699},[5580],{"type":1664,"url":5581},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[1713,1714,1715],{"id":251,"slug":5584,"dossier":45,"summary":289,"aliases":5585,"sourceIds":5587,"published":5588,"modified":5589,"checkedAt":7,"severity":5590,"references":5592,"versionKeys":5595,"packageCount":32,"repositoryCount":461},"pysec-2025-213-9043dc9b",[5586],"CVE-2025-14924",[251],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[5591],{"type":1660,"score":1699},[5593],{"type":1664,"url":5594},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[1713,1714,1715],{"id":252,"slug":5597,"dossier":45,"summary":289,"aliases":5598,"sourceIds":5600,"published":5601,"modified":5602,"checkedAt":7,"severity":5603,"references":5605,"versionKeys":5608,"packageCount":32,"repositoryCount":461},"pysec-2025-214-eb241255",[5599],"CVE-2025-14926",[252],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[5604],{"type":1660,"score":1699},[5606],{"type":1664,"url":5607},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[1713,1714,1715],{"id":253,"slug":5610,"dossier":45,"summary":289,"aliases":5611,"sourceIds":5613,"published":5614,"modified":5615,"checkedAt":7,"severity":5616,"references":5618,"versionKeys":5621,"packageCount":32,"repositoryCount":461},"pysec-2025-215-6064f491",[5612],"CVE-2025-14927",[253],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[5617],{"type":1660,"score":1699},[5619],{"type":1664,"url":5620},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[1713,1714,1715],{"id":254,"slug":5623,"dossier":45,"summary":289,"aliases":5624,"sourceIds":5626,"published":5627,"modified":5628,"checkedAt":7,"severity":5629,"references":5631,"versionKeys":5634,"packageCount":32,"repositoryCount":461},"pysec-2025-216-5708ed01",[5625],"CVE-2025-14928",[254],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[5630],{"type":1660,"score":1699},[5632],{"type":1664,"url":5633},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[1713,1714,1715],{"id":255,"slug":5636,"dossier":45,"summary":289,"aliases":5637,"sourceIds":5639,"published":5640,"modified":5641,"checkedAt":7,"severity":5642,"references":5644,"versionKeys":5647,"packageCount":32,"repositoryCount":1720},"pysec-2025-217-2c1ad388",[5638],"CVE-2025-14929",[255],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[5643],{"type":1660,"score":1699},[5645],{"type":1664,"url":5646},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[1713,1714,1715,1716,1717,1718,1719],{"id":256,"slug":5649,"dossier":45,"summary":289,"aliases":5650,"sourceIds":5652,"published":5653,"modified":5654,"checkedAt":7,"severity":5655,"references":5657,"versionKeys":5660,"packageCount":32,"repositoryCount":441},"pysec-2025-218-39811fc3",[5651],"CVE-2025-14930",[256],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[5656],{"type":1660,"score":1699},[5658],{"type":1664,"url":5659},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[1713,1714,1715,1716],{"id":257,"slug":5662,"dossier":45,"summary":289,"aliases":5663,"sourceIds":5666,"published":5667,"modified":5668,"checkedAt":7,"severity":5669,"references":5671,"versionKeys":5682,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[5664,5665],"BIT-pytorch-2026-4538","CVE-2026-4538",[257],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[5670],{"type":1660,"score":2895},[5672,5674,5676,5678,5680],{"type":1675,"url":5673},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":1664,"url":5675},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":1664,"url":5677},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":1857,"url":5679},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":1669,"url":5681},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[4959,1876,1877,1878,2956,2957,4718,4719,4720],{"id":258,"slug":5684,"dossier":45,"summary":289,"aliases":5685,"sourceIds":5687,"published":5688,"modified":5689,"checkedAt":7,"severity":5690,"references":5692,"versionKeys":5695,"packageCount":32,"repositoryCount":461},"pysec-2026-2085-e081ac1d",[5686],"CVE-2026-12252",[258],"2026-07-04T02:16:23.603Z","2026-07-09T12:00:05.700183399Z",[5691],{"type":1660,"score":1699},[5693],{"type":1708,"url":5694},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ff5c93982-0cc9-4e2e-bb85-1b6ab29a2efb",[2050,2051],{"id":259,"slug":5697,"dossier":89,"summary":289,"aliases":5698,"sourceIds":5701,"published":5702,"modified":5703,"checkedAt":7,"severity":5704,"references":5707,"versionKeys":5720,"packageCount":32,"repositoryCount":3828},"pysec-2026-2132-627bf7c7",[5699,5700],"CVE-2026-7246","GHSA-47fr-3ffg-hgmw",[259],"2026-04-30T14:16:36.433Z","2026-07-13T07:15:21.899333658Z",[5705],{"type":1660,"score":5706},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:H\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[5708,5710,5712,5713,5714,5716,5718],{"type":1675,"url":5709},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-7246",{"type":1675,"url":5711},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-7246.json",{"type":1664,"url":4205},{"type":1664,"url":4207},{"type":1857,"url":5715},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2464121",{"type":1669,"url":5717},"https:\u002F\u002Fgithub.com\u002Fpallets\u002Fclick\u002Freleases\u002Ftag\u002F8.3.3",{"type":1708,"url":5719},"https:\u002F\u002Fgithub.com\u002Ftsigouris007\u002Fsecurity-advisories\u002Fsecurity\u002Fadvisories\u002FGHSA-47fr-3ffg-hgmw",[5721,5722,5723,5724,5725,5726],"pypi:click@8.1.7","pypi:click@8.1.8","pypi:click@8.2.0","pypi:click@8.2.1","pypi:click@8.3.0","pypi:click@8.3.1",{"id":260,"slug":5728,"dossier":45,"summary":289,"aliases":5729,"sourceIds":5734,"published":5735,"modified":5736,"checkedAt":7,"severity":5737,"references":5739,"versionKeys":5755,"packageCount":32,"repositoryCount":1752},"pysec-2026-2286-8795b007",[5730,5731,5732,5733],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[260],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[5738],{"type":1660,"score":3402},[5740,5742,5744,5745,5747,5749,5751,5753],{"type":1675,"url":5741},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":1675,"url":5743},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":1664,"url":4067},{"type":1664,"url":5746},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":1664,"url":5748},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":1857,"url":5750},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":1857,"url":5752},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":1669,"url":5754},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[1876,1877,1878,2956,2957,4718,4719,4720],{"id":261,"slug":5757,"dossier":45,"summary":289,"aliases":5758,"sourceIds":5760,"published":5761,"modified":5762,"checkedAt":7,"severity":5763,"references":5766,"versionKeys":5769,"packageCount":32,"repositoryCount":461},"pysec-2026-597-f85c09cd",[5759],"CVE-2026-12243",[261],"2026-06-30T01:16:29.063Z","2026-07-01T18:15:06.027046365Z",[5764],{"type":1660,"score":5765},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[5767],{"type":1708,"url":5768},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F39aa9354-54ca-4e77-96da-580eb1fe6ed1",[2050,2051],{"id":262,"slug":5771,"dossier":45,"summary":289,"aliases":5772,"sourceIds":5774,"published":5775,"modified":5776,"checkedAt":7,"severity":5777,"references":5779,"versionKeys":5782,"packageCount":32,"repositoryCount":461},"pysec-2026-99-2c63e84f",[5773],"CVE-2026-0848",[262],"2026-03-05T21:16:14.263Z","2026-05-20T09:19:09.284207Z",[5778],{"type":1660,"score":2845},[5780],{"type":1708,"url":5781},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F08b109bb-ac24-403f-9422-1c246ce60202",[2050,2051],1786591831023]