[{"data":1,"prerenderedAt":1382},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-repository-opencode-8712":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":148,"related":172},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-13T03:22:54.231Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-13T03:21:22.165Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"repository",{"id":77,"slug":78,"gitlabProjectId":79,"name":80,"pathWithNamespace":81,"description":82,"webUrl":83,"commitSha":84,"commitUrl":85,"lastActivityAt":86,"headCommittedAt":87,"tree":88,"files":91,"resolvedComponentCount":92,"artifactResolvedComponentCount":37,"exactManifestPinCount":92,"packageCount":93,"ecosystems":94,"aiPackageCount":93,"licenseExpressionCount":96,"unknownLicensePackageCount":37,"advisoryIds":97,"advisoryCount":146,"providers":147},"opencode:8712","opencode-8712",8712,"F13-RAG","landeshauptstadt-muenchen\u002Ff-13-rag","Microservice zur Durchsuchung von Texten und Datenbanken mit natürlicher Sprache","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag","ddae51bb41a08acf9c1bcdee5dc8ce92df04649c","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fcommit\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c","2026-02-12T08:49:11.302Z","2025-12-17T16:34:35.000Z",{"complete":89,"entryCount":90,"truncated":45},true,153,[],29,7,[95],"pypi",3,[98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],"GHSA-29pf-2h5f-8g72","GHSA-3749-ghw9-m3mg","GHSA-37mw-44qp-f5jm","GHSA-4w7r-h757-3r74","GHSA-53q9-r3pm-6pq6","GHSA-59p9-h35m-wg4g","GHSA-69w3-r845-3855","GHSA-6rvg-6v2m-4j46","GHSA-887c-mr87-cxwp","GHSA-9356-575x-2w9m","GHSA-c678-jfcj-6jmf","GHSA-f4hp-rmr7-r7v8","GHSA-fgcw-684q-jj6r","GHSA-fpwr-67px-3qhx","GHSA-hxxf-235m-72v3","GHSA-jjph-296x-mrcr","GHSA-phhr-52qp-3mj4","GHSA-q2wp-rjmx-x6x9","GHSA-qfhq-4f3w-5fph","GHSA-qq3j-4f4f-9583","GHSA-qxrp-vhvm-j765","GHSA-rcv9-qm8p-9p6j","GHSA-rrmf-rvhw-rf47","GHSA-vgrw-7cvw-pwgx","GHSA-wrfc-pvp9-mr9g","GHSA-x3gm-94wq-g975","PYSEC-2025-198","PYSEC-2025-199","PYSEC-2025-200","PYSEC-2025-201","PYSEC-2025-202","PYSEC-2025-203","PYSEC-2025-204","PYSEC-2025-205","PYSEC-2025-206","PYSEC-2025-207","PYSEC-2025-208","PYSEC-2025-209","PYSEC-2025-211","PYSEC-2025-212","PYSEC-2025-213","PYSEC-2025-214","PYSEC-2025-215","PYSEC-2025-216","PYSEC-2025-217","PYSEC-2025-218","PYSEC-2026-139","PYSEC-2026-2286",48,[],{"files":149,"occurrenceCount":92},[150,156,160,164,168],{"path":151,"kind":152,"sourceUrl":153,"commitSha":84,"blobSha":154,"state":155,"componentCount":93},"requirements-dev.txt","exact-manifest-pin","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-dev.txt","76efb9a752987481ba23ef081e7e3a05d59ed513","parsed",{"path":157,"kind":152,"sourceUrl":158,"commitSha":84,"blobSha":159,"state":155,"componentCount":32},"requirements-gpu.in","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.in","6813fdb0df770767721e8b602ebe6c547b22da0b",{"path":161,"kind":152,"sourceUrl":162,"commitSha":84,"blobSha":163,"state":155,"componentCount":93},"requirements-gpu.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-gpu.txt","8c2dfe24b230ff6ad5cc0779e7e45ce51a1e20a1",{"path":165,"kind":152,"sourceUrl":166,"commitSha":84,"blobSha":167,"state":155,"componentCount":93},"requirements-testing.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements-testing.txt","a62dcf771b99cedee4157c93a2e50d10f678e585",{"path":169,"kind":152,"sourceUrl":170,"commitSha":84,"blobSha":171,"state":155,"componentCount":93},"requirements.txt","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Ff-13-rag\u002F-\u002Fblob\u002Fddae51bb41a08acf9c1bcdee5dc8ce92df04649c\u002Frequirements.txt","da215299c628b804b28789cb8267236418948d82",{"packages":173,"vulnerabilities":249},[174,188,202,211,221,231,240],{"id":175,"slug":176,"identity":177,"label":178,"aiRelevant":89,"provider":179,"advisoryCount":182,"licenseExpressions":183,"versions":185,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":187},"package:pypi:transformers","transformers-65289303","pypi:transformers","Transformers",{"id":180,"label":181},"hugging-face","Hugging Face",25,[184],"Apache-2.0",[186],"4.57.3",[151,161,165,169],{"id":189,"slug":190,"identity":191,"label":192,"aiRelevant":89,"provider":193,"advisoryCount":194,"licenseExpressions":195,"versions":197,"dossier":89,"occurrenceCount":200,"directOccurrenceCount":32,"evidenceFiles":201},"package:pypi:torch","torch-47a5352a","pypi:torch","PyTorch",null,23,[196],"BSD-3-Clause",[198,199],"2.7.1","2.9.1+cpu",5,[151,157,161,165,169],{"id":70,"slug":71,"identity":203,"label":72,"aiRelevant":89,"provider":204,"advisoryCount":37,"licenseExpressions":207,"versions":208,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":210},"pypi:openai",{"id":205,"label":206},"openai","OpenAI",[184],[209],"2.12.0",[151,161,165,169],{"id":212,"slug":213,"identity":214,"label":215,"aiRelevant":89,"provider":216,"advisoryCount":37,"licenseExpressions":217,"versions":218,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":220},"package:pypi:sentence-transformers","sentence-transformers-3f3d7a36","pypi:sentence-transformers","Sentence Transformers",{"id":180,"label":181},[184],[219],"5.2.0",[151,161,165,169],{"id":222,"slug":223,"identity":224,"label":225,"aiRelevant":89,"provider":193,"advisoryCount":37,"licenseExpressions":226,"versions":228,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":230},"package:pypi:accelerate","accelerate-7fac5dd9","pypi:accelerate","Accelerate",[227],"non-standard",[229],"1.12.0",[151,161,165,169],{"id":232,"slug":233,"identity":234,"label":235,"aiRelevant":89,"provider":193,"advisoryCount":37,"licenseExpressions":236,"versions":237,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":239},"package:pypi:tokenizers","tokenizers-7ba00902","pypi:tokenizers","Hugging Face Tokenizers",[227],[238],"0.22.1",[151,161,165,169],{"id":241,"slug":242,"identity":243,"label":244,"aiRelevant":89,"provider":193,"advisoryCount":37,"licenseExpressions":245,"versions":246,"dossier":89,"occurrenceCount":34,"directOccurrenceCount":37,"evidenceFiles":248},"package:pypi:scikit-learn","scikit-learn-ab0941d9","pypi:scikit-learn","scikit-learn",[196,227],[247],"1.8.0",[151,161,165,169],[250,287,332,360,386,412,435,462,485,524,549,581,615,654,677,708,733,758,780,817,845,872,899,931,959,984,1016,1037,1054,1073,1090,1111,1127,1142,1159,1174,1191,1208,1225,1238,1251,1264,1277,1290,1303,1316,1329,1352],{"id":98,"slug":251,"dossier":45,"summary":252,"aliases":253,"sourceIds":256,"published":257,"modified":258,"checkedAt":7,"severity":259,"references":263,"versionKeys":278,"packageCount":32,"repositoryCount":286},"ghsa-29pf-2h5f-8g72-1d83ebb4","HuggingFace transformers vulnerable to remote code execution",[254,255],"CVE-2026-4372","PYSEC-2026-2289",[98,255],"2026-05-24T14:16:16.917Z","2026-07-13T16:45:06.535860363Z",[260],{"type":261,"score":262},"CVSS_V3","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[264,267,270,273,276],{"type":265,"url":266},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-4372",{"type":268,"url":269},"FIX","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fa7f8e7ff37d87d1a1a0c8cf607971c607741452f",{"type":271,"url":272},"PACKAGE","https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers",{"type":274,"url":275},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002F1f693a6e-6836-4b8b-a0bd-ca036fba8884",{"type":265,"url":277},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-29pf-2h5f-8g72",[279,280,281,282,283,284,285],"pypi:transformers@4.47.1","pypi:transformers@4.51.3","pypi:transformers@4.53.1","pypi:transformers@4.57.1","pypi:transformers@4.57.3","pypi:transformers@4.57.4","pypi:transformers@4.57.6",8,{"id":99,"slug":288,"dossier":45,"summary":289,"aliases":290,"sourceIds":294,"published":295,"modified":296,"checkedAt":7,"severity":297,"references":305,"versionKeys":328,"packageCount":32,"repositoryCount":96},"ghsa-3749-ghw9-m3mg-fadf4a32","PyTorch susceptible to local Denial of Service",[291,292,293],"BIT-pytorch-2025-2953","CVE-2025-2953","PYSEC-2025-191",[99,293],"2025-03-30T16:15:14.380Z","2026-06-10T17:02:35.808223212Z",[298,300,303],{"type":261,"score":299},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"type":301,"score":302},"CVSS_V4","CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",{"type":261,"score":304},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[306,308,311,313,316,318,320,322,324,326],{"type":265,"url":307},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2953",{"type":309,"url":310},"REPORT","https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274",{"type":309,"url":312},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149274#issue-2923122269",{"type":314,"url":315},"WEB","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-191.yaml",{"type":271,"url":317},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch",{"type":314,"url":319},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fmain\u002FSECURITY.md#untrusted-models",{"type":309,"url":321},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302006",{"type":265,"url":323},"https:\u002F\u002Fvuldb.com\u002F?id.302006",{"type":265,"url":325},"https:\u002F\u002Fvuldb.com\u002F?submit.521279",{"type":265,"url":327},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3749-ghw9-m3mg",[329,330,331],"pypi:torch@2.5.1","pypi:torch@2.6.0","pypi:torch@2.7.0",{"id":100,"slug":333,"dossier":45,"summary":334,"aliases":335,"sourceIds":338,"published":339,"modified":340,"checkedAt":7,"severity":341,"references":344,"versionKeys":358,"packageCount":32,"repositoryCount":359},"ghsa-37mw-44qp-f5jm-fb05555e","Transformers is vulnerable to ReDoS attack through its DonutProcessor class",[336,337],"CVE-2025-3933","PYSEC-2026-1977",[100,337],"2025-07-11T12:30:32Z","2026-07-07T17:57:16.879129924Z",[342],{"type":261,"score":343},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[345,347,349,351,352,354,356],{"type":265,"url":346},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3933",{"type":314,"url":348},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F37788",{"type":314,"url":350},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Febbe9b12dd75b69f92100d684c47f923ee262a93",{"type":271,"url":272},{"type":314,"url":353},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F25282953-5827-4384-bb6f-5790d275721b",{"type":271,"url":355},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftransformers",{"type":265,"url":357},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-37mw-44qp-f5jm",[279,280],2,{"id":101,"slug":361,"dossier":45,"summary":362,"aliases":363,"sourceIds":366,"published":367,"modified":368,"checkedAt":7,"severity":369,"references":372,"versionKeys":385,"packageCount":32,"repositoryCount":359},"ghsa-4w7r-h757-3r74-ca8973bc","Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer",[364,365],"CVE-2025-6921","PYSEC-2026-1980",[101,365],"2025-09-23T15:31:09Z","2026-07-07T17:57:12.050585329Z",[370],{"type":261,"score":371},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[373,375,377,379,380,382,383],{"type":265,"url":374},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6921",{"type":314,"url":376},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F47c34fba5c303576560cb29767efb452ff12b8be",{"type":314,"url":378},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fd37f7517972f67e3f2194c000ed0f87f064e5099",{"type":271,"url":272},{"type":314,"url":381},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F287d15a7-6e7c-45d2-8c05-11e305776f1f",{"type":271,"url":355},{"type":265,"url":384},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-4w7r-h757-3r74",[279,280],{"id":102,"slug":387,"dossier":45,"summary":388,"aliases":389,"sourceIds":393,"published":394,"modified":395,"checkedAt":7,"severity":396,"references":401,"versionKeys":411,"packageCount":32,"repositoryCount":32},"ghsa-53q9-r3pm-6pq6-6fbb0149","PyTorch: `torch.load` with `weights_only=True` leads to remote code execution",[390,391,392],"BIT-pytorch-2025-32434","CVE-2025-32434","PYSEC-2025-41",[102,392],"2025-04-18T15:19:28Z","2026-08-07T08:12:20.395044060Z",[397,399],{"type":301,"score":398},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N",{"type":261,"score":400},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[402,404,406,408,410],{"type":265,"url":403},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-53q9-r3pm-6pq6",{"type":265,"url":405},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-32434",{"type":314,"url":407},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F8d4b8a920a2172523deb95bf20e8e52d50649c04",{"type":314,"url":409},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-41.yaml",{"type":271,"url":317},[329],{"id":103,"slug":413,"dossier":45,"summary":414,"aliases":415,"sourceIds":418,"published":419,"modified":420,"checkedAt":7,"severity":421,"references":423,"versionKeys":434,"packageCount":32,"repositoryCount":359},"ghsa-59p9-h35m-wg4g-68657c65","Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer",[416,417],"CVE-2025-6638","PYSEC-2026-1981",[103,417],"2025-09-12T12:30:23Z","2026-07-07T17:56:49.269701149Z",[422],{"type":261,"score":371},[424,426,427,428,429,431,432],{"type":265,"url":425},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6638",{"type":314,"url":376},{"type":314,"url":378},{"type":271,"url":272},{"type":314,"url":430},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F6a6c933f-9ce8-4ded-8b3b-2c1444c61f36",{"type":271,"url":355},{"type":265,"url":433},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-59p9-h35m-wg4g",[279,280],{"id":104,"slug":436,"dossier":45,"summary":437,"aliases":438,"sourceIds":441,"published":442,"modified":443,"checkedAt":7,"severity":444,"references":449,"versionKeys":461,"packageCount":32,"repositoryCount":286},"ghsa-69w3-r845-3855-1b4edc28","HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class",[439,440],"CVE-2026-1839","PYSEC-2026-2288",[104,440],"2026-04-07T06:16:41.490Z","2026-07-13T16:45:06.516869221Z",[445,447],{"type":261,"score":446},"CVSS:3.0\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:H",{"type":261,"score":448},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[450,452,454,455,457,459],{"type":265,"url":451},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-1839",{"type":268,"url":453},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F03c8082ba4594c9b8d6fe190ca9bed0e5f8ca396",{"type":271,"url":272},{"type":314,"url":456},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Freleases\u002Ftag\u002Fv5.0.0rc3",{"type":274,"url":458},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c77bb97-e493-493d-9a88-c57f5c536485",{"type":265,"url":460},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-69w3-r845-3855",[279,280,281,282,283,284,285],{"id":105,"slug":463,"dossier":45,"summary":464,"aliases":465,"sourceIds":468,"published":469,"modified":470,"checkedAt":7,"severity":471,"references":473,"versionKeys":484,"packageCount":32,"repositoryCount":32},"ghsa-6rvg-6v2m-4j46-e04ee614","Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[466,467],"CVE-2024-12720","PYSEC-2026-1982",[105,467],"2025-03-20T12:32:43Z","2026-07-07T17:56:13.229192922Z",[472],{"type":261,"score":371},[474,476,478,479,481,482],{"type":265,"url":475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-12720",{"type":314,"url":477},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fdeac971c469bcbb182c2e52da0b82fb3bf54cccf",{"type":271,"url":272},{"type":314,"url":480},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F4bed1214-7835-4252-a853-22bbad891f98",{"type":271,"url":355},{"type":265,"url":483},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6rvg-6v2m-4j46",[279],{"id":106,"slug":486,"dossier":45,"summary":487,"aliases":488,"sourceIds":492,"published":493,"modified":494,"checkedAt":7,"severity":495,"references":499,"versionKeys":521,"packageCount":32,"repositoryCount":93},"ghsa-887c-mr87-cxwp-233a2961","PyTorch Improper Resource Shutdown or Release vulnerability",[489,490,491],"BIT-pytorch-2025-3730","CVE-2025-3730","PYSEC-2026-1970",[106,491],"2025-04-16T21:30:59Z","2026-08-07T08:11:51.496178283Z",[496,497],{"type":261,"score":299},{"type":301,"score":498},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[500,502,504,506,508,510,511,513,515,517,519],{"type":265,"url":501},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3730",{"type":314,"url":503},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F150835",{"type":314,"url":505},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F150981",{"type":314,"url":507},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F01f226bfb8f2c343f5c614a6bbf685d91160f3af",{"type":314,"url":509},"https:\u002F\u002Fgithub.com\u002Ftimocafe\u002Ftewart-pytorch\u002Fcommit\u002F46fc5d8e360127361211cb237d5f9eef0223e567",{"type":271,"url":317},{"type":314,"url":512},"https:\u002F\u002Fvuldb.com\u002F?ctiid.305076",{"type":314,"url":514},"https:\u002F\u002Fvuldb.com\u002F?id.305076",{"type":314,"url":516},"https:\u002F\u002Fvuldb.com\u002F?submit.553645",{"type":271,"url":518},"https:\u002F\u002Fpypi.org\u002Fproject\u002Ftorch",{"type":265,"url":520},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-887c-mr87-cxwp",[329,330,331,522,523],"pypi:torch@2.7.1","pypi:torch@2.7.1+cpu",{"id":107,"slug":525,"dossier":45,"summary":526,"aliases":527,"sourceIds":530,"published":531,"modified":532,"checkedAt":7,"severity":533,"references":535,"versionKeys":548,"packageCount":32,"repositoryCount":359},"ghsa-9356-575x-2w9m-908a1f8c","Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability",[528,529],"CVE-2025-5197","PYSEC-2026-1983",[107,529],"2025-08-06T12:31:20Z","2026-07-07T17:57:12.881673492Z",[534],{"type":261,"score":371},[536,538,540,542,543,545,546],{"type":265,"url":537},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-5197",{"type":314,"url":539},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F701caef704e356dc2f9331cc3fd5df0eccb4720a",{"type":314,"url":541},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F944b56000be5e9b61af8301aa340838770ad8a0b",{"type":271,"url":272},{"type":314,"url":544},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3f8b3fd0-166b-46e7-b60f-60dd9d2678bf",{"type":271,"url":355},{"type":265,"url":547},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-9356-575x-2w9m",[279,280],{"id":108,"slug":550,"dossier":45,"summary":551,"aliases":552,"sourceIds":556,"published":557,"modified":558,"checkedAt":7,"severity":559,"references":564,"versionKeys":580,"packageCount":32,"repositoryCount":359},"ghsa-c678-jfcj-6jmf-cd9a8774","PyTorch Tuple Handler is Vulnerable to Memory Corruption through Manipulation of None Argument",[553,554,555],"BIT-pytorch-2025-2148","CVE-2025-2148","PYSEC-2025-189",[108],"2025-03-10T12:30:55Z","2026-06-09T21:26:06.844649427Z",[560,562],{"type":261,"score":561},"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":301,"score":563},"CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:P\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[565,567,569,571,572,574,576,578],{"type":265,"url":566},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2148",{"type":314,"url":568},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147722",{"type":314,"url":570},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-189.yaml",{"type":271,"url":317},{"type":314,"url":573},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fblob\u002Fb0a67c7495bb11ecb23e556058db059ba48354af\u002Ftorch\u002Fautograd\u002Fprofiler.py#L990",{"type":314,"url":575},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299059",{"type":314,"url":577},"https:\u002F\u002Fvuldb.com\u002F?id.299059",{"type":314,"url":579},"https:\u002F\u002Fvuldb.com\u002F?submit.505959",[329,330],{"id":109,"slug":582,"dossier":45,"summary":583,"aliases":584,"sourceIds":588,"published":589,"modified":590,"checkedAt":7,"severity":591,"references":596,"versionKeys":614,"packageCount":32,"repositoryCount":359},"ghsa-f4hp-rmr7-r7v8-fe038cb7","PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function",[585,586,587],"BIT-pytorch-2025-2998","CVE-2025-2998","PYSEC-2025-192",[109],"2025-03-31T15:30:48Z","2026-06-09T22:11:09.050788278Z",[592,594],{"type":261,"score":593},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L",{"type":301,"score":595},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N",[597,599,601,603,605,607,608,610,612],{"type":265,"url":598},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2998",{"type":314,"url":600},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622",{"type":314,"url":602},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149622#issue-2935495265",{"type":314,"url":604},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F494518046816d29099b7d056a74ffa5c244fdcdd",{"type":314,"url":606},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-192.yaml",{"type":271,"url":317},{"type":314,"url":609},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302047",{"type":314,"url":611},"https:\u002F\u002Fvuldb.com\u002F?id.302047",{"type":314,"url":613},"https:\u002F\u002Fvuldb.com\u002F?submit.524151",[329,330],{"id":110,"slug":616,"dossier":45,"summary":617,"aliases":618,"sourceIds":621,"published":622,"modified":623,"checkedAt":7,"severity":624,"references":629,"versionKeys":653,"packageCount":32,"repositoryCount":286},"ghsa-fgcw-684q-jj6r-9fe55ba1","huggingface\u002Ftransformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path",[619,620],"CVE-2026-5241","PYSEC-2026-2290",[110,620],"2026-06-03T14:16:46.337Z","2026-07-23T15:00:26.322865889Z",[625,627],{"type":261,"score":626},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:N",{"type":261,"score":628},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",[630,632,634,636,638,640,642,644,645,647,649,651],{"type":265,"url":631},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-5241",{"type":268,"url":633},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F676559d5022b74aaa0cee1cee0842b7f27c5320e",{"type":265,"url":635},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:34456",{"type":265,"url":637},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":314,"url":639},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:42644",{"type":314,"url":641},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-5241",{"type":309,"url":643},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2484384",{"type":271,"url":272},{"type":314,"url":646},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2026-2290.yaml",{"type":274,"url":648},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fceb3ce1a-4c45-497a-b25e-cb9a7685e619",{"type":314,"url":650},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-5241.json",{"type":265,"url":652},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fgcw-684q-jj6r",[279,280,281,282,283,284,285],{"id":111,"slug":655,"dossier":45,"summary":464,"aliases":656,"sourceIds":659,"published":660,"modified":661,"checkedAt":7,"severity":662,"references":665,"versionKeys":676,"packageCount":32,"repositoryCount":32},"ghsa-fpwr-67px-3qhx-94f30126",[657,658],"CVE-2025-1194","PYSEC-2026-1984",[111,658],"2025-04-29T12:30:21Z","2026-07-07T17:57:12.290933710Z",[663],{"type":261,"score":664},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[666,668,670,671,673,674],{"type":265,"url":667},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-1194",{"type":314,"url":669},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F92c5ca9dd70de3ade2af2eb835c96215cc50e815",{"type":271,"url":272},{"type":314,"url":672},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F86f58dcd-683f-4adc-a735-849f51e9abb2",{"type":271,"url":355},{"type":265,"url":675},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-fpwr-67px-3qhx",[279],{"id":112,"slug":678,"dossier":45,"summary":679,"aliases":680,"sourceIds":683,"published":684,"modified":685,"checkedAt":7,"severity":686,"references":691,"versionKeys":707,"packageCount":32,"repositoryCount":32},"ghsa-hxxf-235m-72v3-21da19b0","Deserialization of Untrusted Data in Hugging Face Transformers",[681,682],"CVE-2024-11394","PYSEC-2024-229",[112,682],"2024-11-22T22:15:07Z","2026-06-10T17:02:30.328718397Z",[687,689],{"type":261,"score":688},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":261,"score":690},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[692,694,696,698,699,701,703,705],{"type":265,"url":693},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11394",{"type":314,"url":695},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fissues\u002F34840",{"type":314,"url":697},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F35296",{"type":271,"url":272},{"type":314,"url":700},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-229.yaml",{"type":314,"url":702},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515",{"type":265,"url":704},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1515\u002F",{"type":265,"url":706},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-hxxf-235m-72v3",[279],{"id":113,"slug":709,"dossier":45,"summary":710,"aliases":711,"sourceIds":714,"published":715,"modified":716,"checkedAt":7,"severity":717,"references":719,"versionKeys":732,"packageCount":32,"repositoryCount":32},"ghsa-jjph-296x-mrcr-0f661d67","Transformers vulnerable to ReDoS attack through its get_imports() function",[712,713],"CVE-2025-3264","PYSEC-2026-1985",[113,713],"2025-07-07T12:30:22Z","2026-07-07T17:56:51.899728258Z",[718],{"type":261,"score":371},[720,722,724,726,727,729,730],{"type":265,"url":721},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3264",{"type":314,"url":723},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F0720e206c6ba28887e4d60ef60a6a089f6c1cc76",{"type":314,"url":725},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F126abe3461762e5fc180e7e614391d1b4ab051ca",{"type":271,"url":272},{"type":314,"url":728},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F3c6f7822-9992-476d-8cf0-b0b1623427df",{"type":271,"url":355},{"type":265,"url":731},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-jjph-296x-mrcr",[279],{"id":114,"slug":734,"dossier":45,"summary":735,"aliases":736,"sourceIds":739,"published":715,"modified":740,"checkedAt":7,"severity":741,"references":744,"versionKeys":757,"packageCount":32,"repositoryCount":359},"ghsa-phhr-52qp-3mj4-6f5d82e3","Transformers's Improper Input Validation vulnerability can be exploited through username injection",[737,738],"CVE-2025-3777","PYSEC-2026-1986",[114,738],"2026-07-07T17:56:47.225461188Z",[742],{"type":261,"score":743},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[745,747,749,750,752,754,755],{"type":265,"url":746},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3777",{"type":314,"url":748},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F4dda5f71b35fb70cf602187eef84bb17a50b9082",{"type":271,"url":272},{"type":314,"url":751},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fblame\u002Fa7d2bbaaa8aac64f7c1ee8c1421cfe84b38359a4\u002Fsrc\u002Ftransformers\u002Fimage_utils.py",{"type":314,"url":753},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fccba0730-9248-4853-b7ff-5c20e6364f09",{"type":271,"url":355},{"type":265,"url":756},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-phhr-52qp-3mj4",[279,280],{"id":115,"slug":759,"dossier":45,"summary":760,"aliases":761,"sourceIds":764,"published":715,"modified":765,"checkedAt":7,"severity":766,"references":768,"versionKeys":779,"packageCount":32,"repositoryCount":32},"ghsa-q2wp-rjmx-x6x9-43135d3d","Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking",[762,763],"CVE-2025-3263","PYSEC-2026-1987",[115,763],"2026-07-07T17:56:57.889099913Z",[767],{"type":261,"score":371},[769,771,772,773,774,776,777],{"type":265,"url":770},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3263",{"type":314,"url":723},{"type":314,"url":725},{"type":271,"url":272},{"type":314,"url":775},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fc7a69150-54f8-4e81-8094-791e7a2a0f29",{"type":271,"url":355},{"type":265,"url":778},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-q2wp-rjmx-x6x9",[279],{"id":116,"slug":781,"dossier":45,"summary":782,"aliases":783,"sourceIds":787,"published":788,"modified":789,"checkedAt":7,"severity":790,"references":794,"versionKeys":812,"packageCount":32,"repositoryCount":816},"ghsa-qfhq-4f3w-5fph-33bc3f14","PyTorch is vulnerable to memory corruption through its torch.lstm_cell function",[784,785,786],"BIT-pytorch-2025-3001","CVE-2025-3001","PYSEC-2025-195",[116],"2025-03-31T18:31:08Z","2026-06-10T18:26:26.736808954Z",[791,792],{"type":261,"score":593},{"type":301,"score":793},"CVSS:4.0\u002FAV:L\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:L\u002FVI:L\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:P",[795,797,799,801,803,805,806,808,810],{"type":265,"url":796},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3001",{"type":314,"url":798},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626",{"type":314,"url":800},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149626#issue-2935860995",{"type":314,"url":802},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002F999d94b5ede5f4ec111ba7dd144129e2c2725b03",{"type":314,"url":804},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-195.yaml",{"type":271,"url":317},{"type":314,"url":807},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302050",{"type":314,"url":809},"https:\u002F\u002Fvuldb.com\u002F?id.302050",{"type":314,"url":811},"https:\u002F\u002Fvuldb.com\u002F?submit.524212",[329,330,331,522,523,813,814,815],"pypi:torch@2.8.0","pypi:torch@2.9.1","pypi:torch@2.9.1+cpu",9,{"id":117,"slug":818,"dossier":45,"summary":819,"aliases":820,"sourceIds":823,"published":824,"modified":825,"checkedAt":7,"severity":826,"references":830,"versionKeys":844,"packageCount":32,"repositoryCount":32},"ghsa-qq3j-4f4f-9583-cd76c72c","Hugging Face Transformers Regular Expression Denial of Service",[821,822],"CVE-2025-2099","PYSEC-2025-40",[117,822],"2025-05-19T12:15:19Z","2026-06-10T17:02:48.111891265Z",[827,828],{"type":261,"score":371},{"type":261,"score":829},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",[831,833,835,837,838,840,842],{"type":265,"url":832},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2099",{"type":314,"url":834},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F36648",{"type":268,"url":836},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F8cb522b4190bd556ce51be04942720650b1a3e57",{"type":271,"url":272},{"type":314,"url":839},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2025-40.yaml",{"type":314,"url":841},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002F97b780f3-ffca-424f-ad5d-0e1c57a5bde4",{"type":265,"url":843},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qq3j-4f4f-9583",[279],{"id":118,"slug":846,"dossier":45,"summary":679,"aliases":847,"sourceIds":850,"published":851,"modified":852,"checkedAt":7,"severity":853,"references":857,"versionKeys":871,"packageCount":32,"repositoryCount":32},"ghsa-qxrp-vhvm-j765-63c6e9a2",[848,849],"CVE-2024-11392","PYSEC-2024-227",[118,849],"2024-11-22T22:15:06Z","2026-06-10T17:02:35.857656186Z",[854,856],{"type":261,"score":855},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":261,"score":690},[858,860,861,862,863,865,867,869],{"type":265,"url":859},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11392",{"type":314,"url":695},{"type":314,"url":697},{"type":271,"url":272},{"type":314,"url":864},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-227.yaml",{"type":314,"url":866},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513",{"type":265,"url":868},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1513\u002F",{"type":265,"url":870},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-qxrp-vhvm-j765",[279],{"id":119,"slug":873,"dossier":45,"summary":874,"aliases":875,"sourceIds":878,"published":879,"modified":880,"checkedAt":7,"severity":881,"references":883,"versionKeys":898,"packageCount":32,"repositoryCount":359},"ghsa-rcv9-qm8p-9p6j-edc1db04","Hugging Face Transformers library has Regular Expression Denial of Service",[876,877],"CVE-2025-6051","PYSEC-2026-1988",[119,877],"2025-09-14T18:30:26Z","2026-07-07T17:56:51.178415128Z",[882],{"type":261,"score":371},[884,886,888,890,892,893,895,896],{"type":265,"url":885},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-6051",{"type":314,"url":887},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fpull\u002F38844",{"type":314,"url":889},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002F54a02160eb030da9be18231c77791f2eb3a52216",{"type":314,"url":891},"https:\u002F\u002Fgithub.com\u002Fhuggingface\u002Ftransformers\u002Fcommit\u002Fba8eaba9865618253f997784aa565b96206426f0",{"type":271,"url":272},{"type":314,"url":894},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Faf929523-7b59-418a-bf55-301830b2ac9d",{"type":271,"url":355},{"type":265,"url":897},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-rcv9-qm8p-9p6j",[279,280],{"id":120,"slug":900,"dossier":45,"summary":901,"aliases":902,"sourceIds":906,"published":589,"modified":907,"checkedAt":7,"severity":908,"references":911,"versionKeys":929,"packageCount":32,"repositoryCount":40},"ghsa-rrmf-rvhw-rf47-389d8330","PyTorch is vulnerable to memory corruption through its torch.jit.script function",[903,904,905],"BIT-pytorch-2025-3000","CVE-2025-3000","PYSEC-2025-194",[120],"2026-07-17T17:15:51.452848951Z",[909,910],{"type":261,"score":593},{"type":301,"score":793},[912,914,916,918,920,922,923,925,927],{"type":265,"url":913},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-3000",{"type":314,"url":915},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623",{"type":314,"url":917},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F149623#issue-2935703015",{"type":314,"url":919},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcommit\u002Fb90c94991cdf8b87c8f7439f79518e0ef2c4ca4f",{"type":314,"url":921},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-194.yaml",{"type":271,"url":317},{"type":314,"url":924},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302049",{"type":314,"url":926},"https:\u002F\u002Fvuldb.com\u002F?id.302049",{"type":314,"url":928},"https:\u002F\u002Fvuldb.com\u002F?submit.524197",[930,329,330,331,522,523,813,814,815],"pypi:torch@2.10.0",{"id":121,"slug":932,"dossier":45,"summary":933,"aliases":934,"sourceIds":938,"published":589,"modified":939,"checkedAt":7,"severity":940,"references":943,"versionKeys":958,"packageCount":32,"repositoryCount":286},"ghsa-vgrw-7cvw-pwgx-766c6098","PyTorch is vulnerable to memory corruption through its unpack_sequence function",[935,936,937],"BIT-pytorch-2025-2999","CVE-2025-2999","PYSEC-2025-193",[121],"2026-06-10T17:41:15.774477397Z",[941,942],{"type":261,"score":593},{"type":301,"score":595},[944,946,947,948,949,951,952,954,956],{"type":265,"url":945},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2999",{"type":314,"url":600},{"type":314,"url":602},{"type":314,"url":604},{"type":314,"url":950},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-193.yaml",{"type":271,"url":317},{"type":314,"url":953},"https:\u002F\u002Fvuldb.com\u002F?ctiid.302048",{"type":314,"url":955},"https:\u002F\u002Fvuldb.com\u002F?id.302048",{"type":314,"url":957},"https:\u002F\u002Fvuldb.com\u002F?submit.524198",[329,330,331,522,523,813],{"id":122,"slug":960,"dossier":45,"summary":679,"aliases":961,"sourceIds":964,"published":684,"modified":965,"checkedAt":7,"severity":966,"references":969,"versionKeys":983,"packageCount":32,"repositoryCount":32},"ghsa-wrfc-pvp9-mr9g-c6b03ddf",[962,963],"CVE-2024-11393","PYSEC-2024-228",[122,963],"2026-06-10T17:00:13.252500033Z",[967,968],{"type":261,"score":688},{"type":261,"score":690},[970,972,973,974,975,977,979,981],{"type":265,"url":971},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-11393",{"type":314,"url":695},{"type":314,"url":697},{"type":271,"url":272},{"type":314,"url":976},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftransformers\u002FPYSEC-2024-228.yaml",{"type":314,"url":978},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514",{"type":265,"url":980},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1514\u002F",{"type":265,"url":982},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-wrfc-pvp9-mr9g",[279],{"id":123,"slug":985,"dossier":45,"summary":986,"aliases":987,"sourceIds":991,"published":992,"modified":993,"checkedAt":7,"severity":994,"references":999,"versionKeys":1015,"packageCount":32,"repositoryCount":359},"ghsa-x3gm-94wq-g975-a197ba31","PyTorch: Manipulation of the argument scale\u002Fzero_point leads to improper initialization via Quantized Sigmoid Module",[988,989,990],"BIT-pytorch-2025-2149","CVE-2025-2149","PYSEC-2025-190",[123],"2025-03-10T15:30:47Z","2026-06-09T22:11:08.734544854Z",[995,997],{"type":261,"score":996},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"type":301,"score":998},"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[1000,1002,1004,1006,1008,1009,1011,1013],{"type":265,"url":1001},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-2149",{"type":314,"url":1003},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818",{"type":314,"url":1005},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147818#issue-2877301660",{"type":314,"url":1007},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Ftorch\u002FPYSEC-2025-190.yaml",{"type":271,"url":317},{"type":314,"url":1010},"https:\u002F\u002Fvuldb.com\u002F?ctiid.299060",{"type":314,"url":1012},"https:\u002F\u002Fvuldb.com\u002F?id.299060",{"type":314,"url":1014},"https:\u002F\u002Fvuldb.com\u002F?submit.506563",[329,330],{"id":124,"slug":1017,"dossier":45,"summary":193,"aliases":1018,"sourceIds":1021,"published":1022,"modified":1023,"checkedAt":7,"severity":1024,"references":1027,"versionKeys":1036,"packageCount":32,"repositoryCount":359},"pysec-2025-198-62b25ed4",[1019,1020],"BIT-pytorch-2025-46148","CVE-2025-46148",[124],"2025-09-25T15:16:12.007Z","2026-05-20T09:19:19.437232Z",[1025],{"type":261,"score":1026},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[1028,1030,1032,1034],{"type":265,"url":1029},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F4bcefba4004f8271e64b5185c95a248a",{"type":265,"url":1031},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F65a587a579dfdff887b9b35bb79b9093",{"type":309,"url":1033},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151198",{"type":268,"url":1035},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F152993",[329,330],{"id":125,"slug":1038,"dossier":45,"summary":193,"aliases":1039,"sourceIds":1042,"published":1043,"modified":1044,"checkedAt":7,"severity":1045,"references":1047,"versionKeys":1053,"packageCount":32,"repositoryCount":32},"pysec-2025-199-c528cb5a",[1040,1041],"BIT-pytorch-2025-46149","CVE-2025-46149",[125],"2025-09-25T15:16:12.153Z","2026-05-20T09:19:19.498677Z",[1046],{"type":261,"score":1026},[1048,1049,1051],{"type":265,"url":1029},{"type":309,"url":1050},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147848",{"type":268,"url":1052},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F147961",[330],{"id":126,"slug":1055,"dossier":45,"summary":193,"aliases":1056,"sourceIds":1059,"published":1060,"modified":1061,"checkedAt":7,"severity":1062,"references":1064,"versionKeys":1072,"packageCount":32,"repositoryCount":32},"pysec-2025-200-d11172cd",[1057,1058],"BIT-pytorch-2025-46150","CVE-2025-46150",[126],"2025-09-25T15:16:12.303Z","2026-05-20T09:19:19.559970Z",[1063],{"type":261,"score":1026},[1065,1066,1068,1070],{"type":265,"url":1029},{"type":309,"url":1067},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538",{"type":309,"url":1069},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F141538#issuecomment-2537424658",{"type":268,"url":1071},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F144395",[330],{"id":127,"slug":1074,"dossier":45,"summary":193,"aliases":1075,"sourceIds":1078,"published":1079,"modified":1080,"checkedAt":7,"severity":1081,"references":1083,"versionKeys":1089,"packageCount":32,"repositoryCount":32},"pysec-2025-201-c002b022",[1076,1077],"BIT-pytorch-2025-46152","CVE-2025-46152",[127],"2025-09-25T15:16:12.470Z","2026-05-20T09:19:19.618679Z",[1082],{"type":261,"score":343},[1084,1085,1087],{"type":265,"url":1029},{"type":309,"url":1086},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F143555",{"type":268,"url":1088},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143635",[330],{"id":128,"slug":1091,"dossier":45,"summary":193,"aliases":1092,"sourceIds":1095,"published":1096,"modified":1097,"checkedAt":7,"severity":1098,"references":1100,"versionKeys":1110,"packageCount":32,"repositoryCount":32},"pysec-2025-202-f0ff1751",[1093,1094],"BIT-pytorch-2025-46153","CVE-2025-46153",[128],"2025-09-25T15:16:12.603Z","2026-05-20T09:19:19.678555Z",[1099],{"type":261,"score":1026},[1101,1103,1104,1106,1108],{"type":314,"url":1102},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fcompare\u002Fv2.6.0...v2.7.0",{"type":265,"url":1029},{"type":265,"url":1105},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002Fe636f2e7a306105b7e96809e2b85c28a",{"type":309,"url":1107},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F142853",{"type":268,"url":1109},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F143460",[330],{"id":129,"slug":1112,"dossier":45,"summary":193,"aliases":1113,"sourceIds":1116,"published":1117,"modified":1118,"checkedAt":7,"severity":1119,"references":1121,"versionKeys":1126,"packageCount":32,"repositoryCount":286},"pysec-2025-203-2febb201",[1114,1115],"BIT-pytorch-2025-55551","CVE-2025-55551",[129],"2025-09-25T15:16:12.887Z","2026-05-20T09:19:19.739357Z",[1120],{"type":261,"score":829},[1122,1124],{"type":265,"url":1123},"https:\u002F\u002Fgist.github.com\u002Fshaoyuyoung\u002F0e7d2a586297ae9c8ed14d8706749efc",{"type":309,"url":1125},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151401",[329,330,331,522,523,813],{"id":130,"slug":1128,"dossier":45,"summary":193,"aliases":1129,"sourceIds":1132,"published":1133,"modified":1134,"checkedAt":7,"severity":1135,"references":1137,"versionKeys":1141,"packageCount":32,"repositoryCount":286},"pysec-2025-204-cdae47da",[1130,1131],"BIT-pytorch-2025-55552","CVE-2025-55552",[130],"2025-09-25T16:15:34.320Z","2026-05-20T09:19:19.802802Z",[1136],{"type":261,"score":829},[1138,1139],{"type":265,"url":1123},{"type":309,"url":1140},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F147847",[329,330,331,522,523,813],{"id":131,"slug":1143,"dossier":45,"summary":193,"aliases":1144,"sourceIds":1147,"published":1148,"modified":1149,"checkedAt":7,"severity":1150,"references":1152,"versionKeys":1158,"packageCount":32,"repositoryCount":96},"pysec-2025-205-fd5e58fd",[1145,1146],"BIT-pytorch-2025-55553","CVE-2025-55553",[131],"2025-09-25T16:15:34.460Z","2026-05-20T09:19:19.866970Z",[1151],{"type":261,"score":829},[1153,1154,1156],{"type":265,"url":1123},{"type":309,"url":1155},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151432",{"type":268,"url":1157},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F154645",[329,330,331],{"id":132,"slug":1160,"dossier":45,"summary":193,"aliases":1161,"sourceIds":1164,"published":1165,"modified":1166,"checkedAt":7,"severity":1167,"references":1169,"versionKeys":1173,"packageCount":32,"repositoryCount":286},"pysec-2025-206-58322476",[1162,1163],"BIT-pytorch-2025-55554","CVE-2025-55554",[132],"2025-09-25T16:15:34.593Z","2026-05-20T09:19:19.928295Z",[1168],{"type":261,"score":343},[1170,1171],{"type":265,"url":1123},{"type":309,"url":1172},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151510",[329,330,331,522,523,813],{"id":133,"slug":1175,"dossier":45,"summary":193,"aliases":1176,"sourceIds":1179,"published":1180,"modified":1181,"checkedAt":7,"severity":1182,"references":1184,"versionKeys":1190,"packageCount":32,"repositoryCount":96},"pysec-2025-207-2abef3fc",[1177,1178],"BIT-pytorch-2025-55557","CVE-2025-55557",[133],"2025-09-25T16:15:34.833Z","2026-05-20T09:19:19.989717Z",[1183],{"type":261,"score":829},[1185,1186,1188],{"type":265,"url":1123},{"type":309,"url":1187},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151738",{"type":268,"url":1189},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151931",[329,330,331],{"id":134,"slug":1192,"dossier":45,"summary":193,"aliases":1193,"sourceIds":1196,"published":1197,"modified":1198,"checkedAt":7,"severity":1199,"references":1201,"versionKeys":1207,"packageCount":32,"repositoryCount":96},"pysec-2025-208-6e93fe9d",[1194,1195],"BIT-pytorch-2025-55558","CVE-2025-55558",[134],"2025-09-25T16:15:34.960Z","2026-05-20T09:19:20.054109Z",[1200],{"type":261,"score":829},[1202,1203,1205],{"type":265,"url":1123},{"type":309,"url":1204},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151523",{"type":268,"url":1206},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151887",[329,330,331],{"id":135,"slug":1209,"dossier":45,"summary":193,"aliases":1210,"sourceIds":1213,"published":1214,"modified":1215,"checkedAt":7,"severity":1216,"references":1218,"versionKeys":1224,"packageCount":32,"repositoryCount":96},"pysec-2025-209-e6f352b0",[1211,1212],"BIT-pytorch-2025-55560","CVE-2025-55560",[135],"2025-09-25T16:15:35.197Z","2026-05-20T09:19:20.117285Z",[1217],{"type":261,"score":829},[1219,1220,1222],{"type":265,"url":1123},{"type":309,"url":1221},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F151522",{"type":268,"url":1223},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F151897",[329,330,331],{"id":136,"slug":1226,"dossier":45,"summary":193,"aliases":1227,"sourceIds":1229,"published":1230,"modified":1231,"checkedAt":7,"severity":1232,"references":1234,"versionKeys":1237,"packageCount":32,"repositoryCount":96},"pysec-2025-211-d8bd15de",[1228],"CVE-2025-14920",[136],"2025-12-23T21:15:47.183Z","2026-05-21T15:00:32.080516132Z",[1233],{"type":261,"score":262},[1235],{"type":265,"url":1236},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1150\u002F",[279,280,281],{"id":137,"slug":1239,"dossier":45,"summary":193,"aliases":1240,"sourceIds":1242,"published":1243,"modified":1244,"checkedAt":7,"severity":1245,"references":1247,"versionKeys":1250,"packageCount":32,"repositoryCount":96},"pysec-2025-212-a011b97d",[1241],"CVE-2025-14921",[137],"2025-12-23T21:15:47.340Z","2026-05-21T15:00:32.052313357Z",[1246],{"type":261,"score":262},[1248],{"type":265,"url":1249},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1149\u002F",[279,280,281],{"id":138,"slug":1252,"dossier":45,"summary":193,"aliases":1253,"sourceIds":1255,"published":1256,"modified":1257,"checkedAt":7,"severity":1258,"references":1260,"versionKeys":1263,"packageCount":32,"repositoryCount":96},"pysec-2025-213-9043dc9b",[1254],"CVE-2025-14924",[138],"2025-12-23T21:15:47.600Z","2026-05-21T15:00:32.048516839Z",[1259],{"type":261,"score":262},[1261],{"type":265,"url":1262},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1141\u002F",[279,280,281],{"id":139,"slug":1265,"dossier":45,"summary":193,"aliases":1266,"sourceIds":1268,"published":1269,"modified":1270,"checkedAt":7,"severity":1271,"references":1273,"versionKeys":1276,"packageCount":32,"repositoryCount":96},"pysec-2025-214-eb241255",[1267],"CVE-2025-14926",[139],"2025-12-23T21:15:47.857Z","2026-05-21T15:00:32.929011749Z",[1272],{"type":261,"score":262},[1274],{"type":265,"url":1275},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1147\u002F",[279,280,281],{"id":140,"slug":1278,"dossier":45,"summary":193,"aliases":1279,"sourceIds":1281,"published":1282,"modified":1283,"checkedAt":7,"severity":1284,"references":1286,"versionKeys":1289,"packageCount":32,"repositoryCount":96},"pysec-2025-215-6064f491",[1280],"CVE-2025-14927",[140],"2025-12-23T21:15:47.987Z","2026-05-21T15:00:32.888290877Z",[1285],{"type":261,"score":262},[1287],{"type":265,"url":1288},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1148\u002F",[279,280,281],{"id":141,"slug":1291,"dossier":45,"summary":193,"aliases":1292,"sourceIds":1294,"published":1295,"modified":1296,"checkedAt":7,"severity":1297,"references":1299,"versionKeys":1302,"packageCount":32,"repositoryCount":96},"pysec-2025-216-5708ed01",[1293],"CVE-2025-14928",[141],"2025-12-23T21:15:48.110Z","2026-05-21T15:00:32.939311939Z",[1298],{"type":261,"score":262},[1300],{"type":265,"url":1301},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1146\u002F",[279,280,281],{"id":142,"slug":1304,"dossier":45,"summary":193,"aliases":1305,"sourceIds":1307,"published":1308,"modified":1309,"checkedAt":7,"severity":1310,"references":1312,"versionKeys":1315,"packageCount":32,"repositoryCount":286},"pysec-2025-217-2c1ad388",[1306],"CVE-2025-14929",[142],"2025-12-23T21:15:48.240Z","2026-05-21T15:00:24.271970226Z",[1311],{"type":261,"score":262},[1313],{"type":265,"url":1314},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1144\u002F",[279,280,281,282,283,284,285],{"id":143,"slug":1317,"dossier":45,"summary":193,"aliases":1318,"sourceIds":1320,"published":1321,"modified":1322,"checkedAt":7,"severity":1323,"references":1325,"versionKeys":1328,"packageCount":32,"repositoryCount":200},"pysec-2025-218-39811fc3",[1319],"CVE-2025-14930",[143],"2025-12-23T21:15:48.367Z","2026-05-21T15:00:33.791364554Z",[1324],{"type":261,"score":262},[1326],{"type":265,"url":1327},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-25-1145\u002F",[279,280,281,282],{"id":144,"slug":1330,"dossier":45,"summary":193,"aliases":1331,"sourceIds":1334,"published":1335,"modified":1336,"checkedAt":7,"severity":1337,"references":1340,"versionKeys":1351,"packageCount":32,"repositoryCount":40},"pysec-2026-139-96951ff6",[1332,1333],"BIT-pytorch-2026-4538","CVE-2026-4538",[144],"2026-03-22T05:16:20.273Z","2026-05-21T15:00:31.962442644Z",[1338],{"type":261,"score":1339},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[1341,1343,1345,1347,1349],{"type":314,"url":1342},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F",{"type":265,"url":1344},"https:\u002F\u002Fvuldb.com\u002F?id.352326",{"type":265,"url":1346},"https:\u002F\u002Fvuldb.com\u002F?submit.774681",{"type":309,"url":1348},"https:\u002F\u002Fvuldb.com\u002F?ctiid.352326",{"type":268,"url":1350},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fpull\u002F176791",[930,329,330,331,522,523,813,814,815],{"id":145,"slug":1353,"dossier":45,"summary":193,"aliases":1354,"sourceIds":1359,"published":1360,"modified":1361,"checkedAt":7,"severity":1362,"references":1364,"versionKeys":1381,"packageCount":32,"repositoryCount":816},"pysec-2026-2286-8795b007",[1355,1356,1357,1358],"BIT-pytorch-2026-24747","CVE-2026-24747","GHSA-63cw-57p8-fm3p","PYSEC-2026-1856",[145],"2026-01-27T22:15:56.470Z","2026-07-13T07:26:23.701611780Z",[1363],{"type":261,"score":690},[1365,1367,1369,1371,1373,1375,1377,1379],{"type":314,"url":1366},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-24747",{"type":314,"url":1368},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-24747.json",{"type":265,"url":1370},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24977",{"type":265,"url":1372},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Freleases\u002Ftag\u002Fv2.10.0",{"type":265,"url":1374},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fsecurity\u002Fadvisories\u002FGHSA-63cw-57p8-fm3p",{"type":309,"url":1376},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2433612",{"type":309,"url":1378},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002Fissues\u002F163105",{"type":268,"url":1380},"https:\u002F\u002Fgithub.com\u002Fpytorch\u002Fpytorch\u002F163122\u002Fcommit\u002F954dc5183ee9205cbe79876ad05dd2d9ae752139",[329,330,331,522,523,813,814,815],1786591831960]