{"tensorflow": {"ecosystem": "PyPI", "count": 676, "vulns": [{"id": "GHSA-23hm-7w47-xw72", "summary": "Out of bounds read in Tensorflow", "modified": "2024-11-13T22:23:25.771384Z", "aliases": ["BIT-tensorflow-2022-21726", "CVE-2022-21726", "PYSEC-2022-105", "PYSEC-2022-50"]}, {"id": "GHSA-2475-53vw-vp25", "summary": "TensorFlow vulnerable to `CHECK` fail in `AvgPoolGrad`", "modified": "2023-12-06T01:02:26.499492Z", "aliases": ["BIT-tensorflow-2022-35968", "CVE-2022-35968"]}, {"id": "GHSA-247x-2f9f-5wp7", "summary": "Stack overflow in TensorFlow", "modified": "2024-11-13T22:24:39.841125Z", "aliases": ["BIT-tensorflow-2022-23591", "CVE-2022-23591", "PYSEC-2022-100", "PYSEC-2022-155"]}, {"id": "GHSA-24x4-6qmh-88qg", "summary": "Use after free in `DecodePng` kernel", "modified": "2024-11-07T22:46:09.628412Z", "aliases": ["BIT-tensorflow-2022-23584", "CVE-2022-23584", "PYSEC-2022-148", "PYSEC-2022-93"]}, {"id": "GHSA-24x6-8c7m-hv3f", "summary": "Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`", "modified": "2026-03-13T22:14:04.253473Z", "aliases": ["BIT-tensorflow-2021-29590", "CVE-2021-29590", "PYSEC-2021-227", "PYSEC-2021-518"]}, {"id": "GHSA-26j7-6w8w-7922", "summary": "Division by zero in optimized pooling implementations in TFLite", "modified": "2026-03-13T22:15:48.361210Z", "aliases": ["BIT-tensorflow-2021-29586", "CVE-2021-29586", "PYSEC-2021-223", "PYSEC-2021-514"]}, {"id": "GHSA-278g-rq84-9hmg", "summary": "`CHECK`-fail in `MapStage`", "modified": "2026-03-13T22:15:37.382353Z", "aliases": ["BIT-tensorflow-2021-37673", "CVE-2021-37673", "PYSEC-2021-295", "PYSEC-2021-586"]}, {"id": "GHSA-27j5-4p9v-pp67", "summary": "`std::abort` raised from `TensorListReserve`", "modified": "2026-03-13T22:16:03.388777Z", "aliases": ["BIT-tensorflow-2021-37644", "CVE-2021-37644", "PYSEC-2021-266", "PYSEC-2021-557"]}, {"id": "GHSA-27qf-jwm8-g7f3", "summary": "FPE in LSH in TFLite", "modified": "2026-03-13T22:14:09.927077Z", "aliases": ["BIT-tensorflow-2021-37691", "CVE-2021-37691", "PYSEC-2021-313", "PYSEC-2021-604"]}, {"id": "GHSA-27rc-728f-x5w2", "summary": "`CHECK` fail via inputs in `SdcaOptimizer`", "modified": "2024-02-16T08:10:55.541191Z", "aliases": ["BIT-tensorflow-2022-41899", "CVE-2022-41899"]}, {"id": "GHSA-2cpx-427x-q2c6", "summary": "CHECK-fail in AddManySparseToTensorsMap", "modified": "2026-03-13T22:15:06.524381Z", "aliases": ["BIT-tensorflow-2021-29523", "CVE-2021-29523", "PYSEC-2021-160", "PYSEC-2021-451"]}, {"id": "GHSA-2gfx-95x2-5v3x", "summary": "Heap buffer overflow in `QuantizedReshape`", "modified": "2026-03-13T22:15:36.821546Z", "aliases": ["BIT-tensorflow-2021-29536", "CVE-2021-29536", "PYSEC-2021-173", "PYSEC-2021-464"]}, {"id": "GHSA-2p25-55c9-h58q", "summary": "Overflow/crash in `tf.tile` when tiling tensor is large", "modified": "2026-03-13T22:16:12.993093Z", "aliases": ["BIT-tensorflow-2021-41198", "CVE-2021-41198", "PYSEC-2021-391", "PYSEC-2021-608"]}, {"id": "GHSA-2p9q-h29j-3f5v", "summary": "Missing validation causes `TensorSummaryV2` to crash", "modified": "2023-12-06T01:02:13.347865Z", "aliases": ["BIT-tensorflow-2022-29193", "CVE-2022-29193"]}, {"id": "GHSA-2r2f-g8mw-9gvr", "summary": "Segfault and OOB write due to incomplete validation in `EditDistance` in TensorFlow", "modified": "2023-12-06T01:02:14.257585Z", "aliases": ["BIT-tensorflow-2022-29208", "CVE-2022-29208"]}, {"id": "GHSA-2r8p-fg3c-wcj4", "summary": "Heap OOB and CHECK fail in `ResourceGather`", "modified": "2026-03-13T22:00:24.360805Z", "aliases": ["BIT-tensorflow-2021-37654", "CVE-2021-37654", "PYSEC-2021-276", "PYSEC-2021-567"]}, {"id": "GHSA-2vv3-56qg-g2cf", "summary": "Missing validation causes denial of service via `LSTMBlockCell`", "modified": "2024-02-16T08:21:41.377063Z", "aliases": ["BIT-tensorflow-2022-29200", "CVE-2022-29200"]}, {"id": "GHSA-2wmv-37vq-52g5", "summary": "FPE in `tf.raw_ops.UnravelIndex`", "modified": "2026-03-13T22:14:39.545877Z", "aliases": ["BIT-tensorflow-2021-37668", "CVE-2021-37668", "PYSEC-2021-290", "PYSEC-2021-581"]}, {"id": "GHSA-2xgj-xhgf-ggjv", "summary": "Heap buffer overflow in `BandedTriangularSolve`", "modified": "2026-03-13T22:14:17.302809Z", "aliases": ["BIT-tensorflow-2021-29612", "CVE-2021-29612", "PYSEC-2021-249", "PYSEC-2021-540"]}, {"id": "GHSA-34f9-hjfq-rr8j", "summary": "Overflow and uncaught divide by zero in Tensorflow", "modified": "2024-11-13T22:25:37.217564Z", "aliases": ["BIT-tensorflow-2022-21729", "CVE-2022-21729", "PYSEC-2022-108", "PYSEC-2022-53"]}, {"id": "GHSA-368v-7v32-52fx", "summary": "Overflow in `ResizeNearestNeighborGrad`", "modified": "2023-12-06T01:02:39.199802Z", "aliases": ["BIT-tensorflow-2022-41907", "CVE-2022-41907"]}, {"id": "GHSA-36vm-xw34-x4pj", "summary": "CHECK-fail in `tf.raw_ops.IRFFT`", "modified": "2026-03-13T22:15:20.414198Z", "aliases": ["BIT-tensorflow-2021-29562", "CVE-2021-29562", "PYSEC-2021-199", "PYSEC-2021-490"]}, {"id": "GHSA-374m-jm66-3vj8", "summary": "Heap OOB in `SparseBinCount`", "modified": "2026-03-13T22:15:27.353603Z", "aliases": ["BIT-tensorflow-2021-41226", "CVE-2021-41226", "PYSEC-2021-418", "PYSEC-2021-635"]}, {"id": "GHSA-37jf-mjv6-xfqw", "summary": "TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`", "modified": "2023-12-06T01:02:28.148712Z", "aliases": ["BIT-tensorflow-2022-35999", "CVE-2022-35999"]}, {"id": "GHSA-393f-2jr3-cp69", "summary": "CHECK-fail in DrawBoundingBoxes", "modified": "2026-03-13T22:16:11.387812Z", "aliases": ["BIT-tensorflow-2021-29533", "CVE-2021-29533", "PYSEC-2021-170", "PYSEC-2021-461"]}]}, "torch": {"ecosystem": "PyPI", "count": 35, "vulns": [{"id": "GHSA-3749-ghw9-m3mg", "summary": "PyTorch susceptible to local Denial of Service", "modified": "2026-05-20T08:11:27.908929437Z", "aliases": ["BIT-pytorch-2025-2953", "CVE-2025-2953", "PYSEC-2025-191"]}, {"id": "GHSA-47fc-vmwq-366v", "summary": "PyTorch vulnerable to arbitrary code execution", "modified": "2024-11-13T23:01:42.831346Z", "aliases": ["BIT-pytorch-2022-45907", "CVE-2022-45907", "PYSEC-2022-43015"]}, {"id": "GHSA-53q9-r3pm-6pq6", "summary": "PyTorch: `torch.load` with `weights_only=True` leads to remote code execution", "modified": "2026-02-04T02:38:45.601605Z", "aliases": ["BIT-pytorch-2025-32434", "CVE-2025-32434", "PYSEC-2025-41"]}, {"id": "GHSA-5pcm-hx3q-hm94", "summary": "PyTorch heap buffer overflow vulnerability", "modified": "2025-06-11T14:36:51.769141Z", "aliases": ["BIT-pytorch-2024-31580", "CVE-2024-31580", "PYSEC-2024-252"]}, {"id": "GHSA-887c-mr87-cxwp", "summary": "PyTorch Improper Resource Shutdown or Release vulnerability", "modified": "2026-03-25T02:46:09.513468Z", "aliases": ["BIT-pytorch-2025-3730", "CVE-2025-3730"]}, {"id": "GHSA-pg7h-5qx3-wjr3", "summary": "Pytorch use-after-free vulnerability", "modified": "2025-06-11T06:29:21.475649Z", "aliases": ["BIT-pytorch-2024-31583", "CVE-2024-31583", "PYSEC-2024-251"]}, {"id": "PYSEC-2022-43015", "summary": null, "modified": "2023-12-06T01:02:42.829739Z", "aliases": ["BIT-pytorch-2022-45907", "CVE-2022-45907", "GHSA-47fc-vmwq-366v"]}, {"id": "PYSEC-2024-250", "summary": null, "modified": "2025-06-04T15:57:11.927887Z", "aliases": ["BIT-pytorch-2024-31584", "CVE-2024-31584"]}, {"id": "PYSEC-2024-251", "summary": null, "modified": "2025-06-11T06:29:21.475649Z", "aliases": ["BIT-pytorch-2024-31583", "CVE-2024-31583", "GHSA-pg7h-5qx3-wjr3"]}, {"id": "PYSEC-2024-252", "summary": null, "modified": "2025-06-11T06:29:31.189342Z", "aliases": ["BIT-pytorch-2024-31580", "CVE-2024-31580", "GHSA-5pcm-hx3q-hm94"]}, {"id": "PYSEC-2024-259", "summary": null, "modified": "2025-07-16T09:57:09.952334Z", "aliases": ["BIT-pytorch-2024-48063", "CVE-2024-48063"]}, {"id": "PYSEC-2025-189", "summary": null, "modified": "2026-05-21T15:00:30.437434859Z", "aliases": ["BIT-pytorch-2025-2148", "CVE-2025-2148"]}, {"id": "PYSEC-2025-190", "summary": null, "modified": "2026-05-21T15:00:30.531583105Z", "aliases": ["BIT-pytorch-2025-2149", "CVE-2025-2149"]}, {"id": "PYSEC-2025-191", "summary": null, "modified": "2026-05-21T15:00:30.538263923Z", "aliases": ["BIT-pytorch-2025-2953", "CVE-2025-2953", "GHSA-3749-ghw9-m3mg"]}, {"id": "PYSEC-2025-192", "summary": null, "modified": "2026-05-21T15:00:31.751402515Z", "aliases": ["BIT-pytorch-2025-2998", "CVE-2025-2998"]}, {"id": "PYSEC-2025-193", "summary": null, "modified": "2026-05-21T15:00:31.797902678Z", "aliases": ["BIT-pytorch-2025-2999", "CVE-2025-2999"]}, {"id": "PYSEC-2025-194", "summary": null, "modified": "2026-05-21T15:00:31.779225542Z", "aliases": ["BIT-pytorch-2025-3000", "CVE-2025-3000"]}, {"id": "PYSEC-2025-195", "summary": null, "modified": "2026-05-21T15:00:31.778544239Z", "aliases": ["BIT-pytorch-2025-3001", "CVE-2025-3001"]}, {"id": "PYSEC-2025-196", "summary": null, "modified": "2026-05-21T15:00:29.127256430Z", "aliases": ["BIT-pytorch-2025-3121", "CVE-2025-3121"]}, {"id": "PYSEC-2025-197", "summary": null, "modified": "2026-05-21T15:00:33.788053233Z", "aliases": ["BIT-pytorch-2025-3136", "CVE-2025-3136"]}, {"id": "PYSEC-2025-198", "summary": null, "modified": "2026-05-20T09:19:19.437232Z", "aliases": ["BIT-pytorch-2025-46148", "CVE-2025-46148"]}, {"id": "PYSEC-2025-199", "summary": null, "modified": "2026-05-20T09:19:19.498677Z", "aliases": ["BIT-pytorch-2025-46149", "CVE-2025-46149"]}, {"id": "PYSEC-2025-200", "summary": null, "modified": "2026-05-20T09:19:19.559970Z", "aliases": ["BIT-pytorch-2025-46150", "CVE-2025-46150"]}, {"id": "PYSEC-2025-201", "summary": null, "modified": "2026-05-20T09:19:19.618679Z", "aliases": ["BIT-pytorch-2025-46152", "CVE-2025-46152"]}, {"id": "PYSEC-2025-202", "summary": null, "modified": "2026-05-20T09:19:19.678555Z", "aliases": ["BIT-pytorch-2025-46153", "CVE-2025-46153"]}]}, "transformers": {"ecosystem": "PyPI", "count": 35, "vulns": [{"id": "GHSA-282v-666c-3fvg", "summary": "transformers has Insecure Temporary File", "modified": "2024-11-22T20:46:31.605562Z", "aliases": ["CVE-2023-2800", "PYSEC-2023-299"]}, {"id": "GHSA-37mw-44qp-f5jm", "summary": "Transformers is vulnerable to ReDoS attack through its DonutProcessor class", "modified": "2026-02-04T03:41:44.405486Z", "aliases": ["CVE-2025-3933"]}, {"id": "GHSA-37q5-v5qm-c9v8", "summary": "Transformers Deserialization of Untrusted Data vulnerability", "modified": "2024-04-10T22:42:15.206835Z", "aliases": ["CVE-2024-3568"]}, {"id": "GHSA-3863-2447-669p", "summary": "transformers has a Deserialization of Untrusted Data vulnerability", "modified": "2024-11-22T21:07:59.234452Z", "aliases": ["CVE-2023-6730", "PYSEC-2023-300"]}, {"id": "GHSA-489j-g2vx-39wf", "summary": "Transformers vulnerable to ReDoS attack through its SETTING_RE variable", "modified": "2025-08-04T16:09:51.283431Z", "aliases": ["CVE-2025-3262"]}, {"id": "GHSA-4w7r-h757-3r74", "summary": "Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer", "modified": "2026-02-04T02:22:49.550201Z", "aliases": ["CVE-2025-6921"]}, {"id": "GHSA-59p9-h35m-wg4g", "summary": "Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer", "modified": "2026-02-04T02:53:08.106733Z", "aliases": ["CVE-2025-6638"]}, {"id": "GHSA-69w3-r845-3855", "summary": "HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class", "modified": "2026-04-17T09:29:13.498050193Z", "aliases": ["CVE-2026-1839"]}, {"id": "GHSA-6rvg-6v2m-4j46", "summary": "Transformers Regular Expression Denial of Service (ReDoS) vulnerability", "modified": "2026-02-04T03:43:16.957765Z", "aliases": ["CVE-2024-12720"]}, {"id": "GHSA-9356-575x-2w9m", "summary": "Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability", "modified": "2026-02-04T03:02:18.027623Z", "aliases": ["CVE-2025-5197"]}, {"id": "GHSA-fpwr-67px-3qhx", "summary": "Transformers Regular Expression Denial of Service (ReDoS) vulnerability", "modified": "2026-02-04T03:52:39.517798Z", "aliases": ["CVE-2025-1194"]}, {"id": "GHSA-hxxf-235m-72v3", "summary": "Deserialization of Untrusted Data in Hugging Face Transformers", "modified": "2026-02-04T03:44:40.634360Z", "aliases": ["CVE-2024-11394", "PYSEC-2024-229"]}, {"id": "GHSA-jjph-296x-mrcr", "summary": "Transformers vulnerable to ReDoS attack through its get_imports() function", "modified": "2025-07-08T17:27:12.108699Z", "aliases": ["CVE-2025-3264"]}, {"id": "GHSA-phhr-52qp-3mj4", "summary": "Transformers's Improper Input Validation vulnerability can be exploited through username injection", "modified": "2026-02-04T02:50:35.590933Z", "aliases": ["CVE-2025-3777"]}, {"id": "GHSA-q2wp-rjmx-x6x9", "summary": "Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking", "modified": "2025-07-08T16:57:18.403502Z", "aliases": ["CVE-2025-3263"]}, {"id": "GHSA-qq3j-4f4f-9583", "summary": "Hugging Face Transformers Regular Expression Denial of Service", "modified": "2025-09-25T21:51:20.118086Z", "aliases": ["CVE-2025-2099", "PYSEC-2025-40"]}, {"id": "GHSA-qxrp-vhvm-j765", "summary": "Deserialization of Untrusted Data in Hugging Face Transformers", "modified": "2026-02-04T02:30:20.854603Z", "aliases": ["CVE-2024-11392", "PYSEC-2024-227"]}, {"id": "GHSA-rcv9-qm8p-9p6j", "summary": "Hugging Face Transformers library has Regular Expression Denial of Service", "modified": "2026-02-04T04:26:51.929360Z", "aliases": ["CVE-2025-6051"]}, {"id": "GHSA-v68g-wm8c-6x7j", "summary": "transformers has a Deserialization of Untrusted Data vulnerability", "modified": "2024-11-22T21:07:38.122545Z", "aliases": ["CVE-2023-7018", "PYSEC-2023-301"]}, {"id": "GHSA-wrfc-pvp9-mr9g", "summary": "Deserialization of Untrusted Data in Hugging Face Transformers", "modified": "2026-02-04T04:32:58.737465Z", "aliases": ["CVE-2024-11393", "PYSEC-2024-228"]}, {"id": "PYSEC-2023-299", "summary": null, "modified": "2024-11-21T14:57:00.339656Z", "aliases": ["CVE-2023-2800", "GHSA-282v-666c-3fvg"]}, {"id": "PYSEC-2023-300", "summary": null, "modified": "2024-11-21T14:56:59.794753Z", "aliases": ["CVE-2023-6730", "GHSA-3863-2447-669p"]}, {"id": "PYSEC-2023-301", "summary": null, "modified": "2024-11-21T14:57:00.944028Z", "aliases": ["CVE-2023-7018", "GHSA-v68g-wm8c-6x7j"]}, {"id": "PYSEC-2024-227", "summary": null, "modified": "2025-02-11T15:59:06.739902Z", "aliases": ["CVE-2024-11392", "GHSA-qxrp-vhvm-j765"]}, {"id": "PYSEC-2024-228", "summary": null, "modified": "2025-02-11T15:41:50.537269Z", "aliases": ["CVE-2024-11393", "GHSA-wrfc-pvp9-mr9g"]}]}, "numpy": {"ecosystem": "PyPI", "count": 16, "vulns": [{"id": "GHSA-2fc2-6r4j-p65h", "summary": "Numpy arbitrary file write via symlink attack", "modified": "2024-10-01T21:25:39.590447Z", "aliases": ["CVE-2014-1859", "PYSEC-2018-34"]}, {"id": "GHSA-5545-2q6w-2gh6", "summary": "NumPy NULL Pointer Dereference", "modified": "2023-11-08T04:06:59.212424Z", "aliases": ["CVE-2021-41495", "PYSEC-2021-856"]}, {"id": "GHSA-6p56-wp2h-9hxr", "summary": "NumPy Buffer Overflow (Disputed)", "modified": "2024-09-26T15:01:21.525444Z", "aliases": ["CVE-2021-33430", "PYSEC-2021-854"]}, {"id": "GHSA-9fq2-x9r6-wfmf", "summary": "Numpy Deserialization of Untrusted Data", "modified": "2024-10-08T12:58:28.442615Z", "aliases": ["CVE-2019-6446", "PYSEC-2019-108"]}, {"id": "GHSA-cw6w-4rcx-xphc", "summary": "Arbitrary file write in NumPy", "modified": "2024-10-07T21:24:52.642615Z", "aliases": ["CVE-2014-1858", "PYSEC-2018-33"]}, {"id": "GHSA-f7c7-j99h-c22f", "summary": "Buffer Copy without Checking Size of Input in NumPy", "modified": "2023-11-08T04:06:59.274139Z", "aliases": ["CVE-2021-41496", "PYSEC-2021-857"]}, {"id": "GHSA-fpfv-jqm9-f5jm", "summary": "Incorrect Comparison in NumPy", "modified": "2023-11-08T04:06:07.388275Z", "aliases": ["CVE-2021-34141", "PYSEC-2021-855"]}, {"id": "GHSA-frgw-fgh6-9g52", "summary": "Numpy missing input validation", "modified": "2023-11-08T03:58:54.336802Z", "aliases": ["CVE-2017-12852", "PYSEC-2017-1"]}, {"id": "PYSEC-2017-1", "summary": null, "modified": "2023-11-08T03:58:54.336802Z", "aliases": ["CVE-2017-12852", "GHSA-frgw-fgh6-9g52"]}, {"id": "PYSEC-2018-33", "summary": null, "modified": "2023-11-08T03:57:35.308828Z", "aliases": ["CVE-2014-1858", "GHSA-cw6w-4rcx-xphc"]}, {"id": "PYSEC-2018-34", "summary": null, "modified": "2023-11-08T03:57:35.369858Z", "aliases": ["CVE-2014-1859", "GHSA-2fc2-6r4j-p65h"]}, {"id": "PYSEC-2019-108", "summary": null, "modified": "2023-11-08T04:01:37.692738Z", "aliases": ["CVE-2019-6446", "GHSA-9fq2-x9r6-wfmf"]}, {"id": "PYSEC-2021-854", "summary": null, "modified": "2023-11-08T04:06:04.438690Z", "aliases": ["CVE-2021-33430", "GHSA-6p56-wp2h-9hxr"]}, {"id": "PYSEC-2021-855", "summary": null, "modified": "2023-11-08T04:06:07.388275Z", "aliases": ["CVE-2021-34141", "GHSA-fpfv-jqm9-f5jm"]}, {"id": "PYSEC-2021-856", "summary": null, "modified": "2023-11-08T04:06:59.212424Z", "aliases": ["CVE-2021-41495", "GHSA-5545-2q6w-2gh6"]}, {"id": "PYSEC-2021-857", "summary": null, "modified": "2023-11-08T04:06:59.274139Z", "aliases": ["CVE-2021-41496", "GHSA-f7c7-j99h-c22f"]}]}, "requests": {"ecosystem": "PyPI", "count": 13, "vulns": [{"id": "GHSA-652x-xj99-gmcc", "summary": "Exposure of Sensitive Information to an Unauthorized Actor in Requests", "modified": "2024-10-21T22:22:54.104555Z", "aliases": ["CVE-2014-1830", "PYSEC-2014-14"]}, {"id": "GHSA-9hjg-9r4m-mvj7", "summary": "Requests vulnerable to .netrc credentials leak via malicious URLs", "modified": "2026-02-04T03:44:00.676479Z", "aliases": ["CVE-2024-47081"]}, {"id": "GHSA-9wx4-h78v-vm56", "summary": "Requests `Session` object does not verify requests after making first request with verify=False", "modified": "2026-02-04T02:43:42.271895Z", "aliases": ["CVE-2024-35195"]}, {"id": "GHSA-cfj3-7x9c-4p3h", "summary": "Exposure of Sensitive Information to an Unauthorized Actor in Requests", "modified": "2024-10-26T22:51:23.384075Z", "aliases": ["CVE-2014-1829", "PYSEC-2014-13"]}, {"id": "GHSA-gc5v-m9x4-r6x2", "summary": "Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function", "modified": "2026-03-27T22:17:33.595885Z", "aliases": ["CVE-2026-25645"]}, {"id": "GHSA-j8r2-6x86-q33q", "summary": "Unintended leak of Proxy-Authorization header in requests", "modified": "2026-02-04T03:34:13.807518Z", "aliases": ["CVE-2023-32681", "PYSEC-2023-74"]}, {"id": "GHSA-pg2w-x9wp-vw92", "summary": "Python Requests Session Fixation", "modified": "2024-12-01T05:57:02.796059Z", "aliases": ["CVE-2015-2296", "PYSEC-2015-17"]}, {"id": "GHSA-x84v-xcm2-53pg", "summary": "Insufficiently Protected Credentials in Requests", "modified": "2024-10-21T21:42:55.896669Z", "aliases": ["CVE-2018-18074", "PYSEC-2018-28"]}, {"id": "PYSEC-2014-13", "summary": null, "modified": "2023-11-08T03:57:34.760439Z", "aliases": ["CVE-2014-1829", "GHSA-cfj3-7x9c-4p3h"]}, {"id": "PYSEC-2014-14", "summary": null, "modified": "2023-11-08T03:57:34.820933Z", "aliases": ["CVE-2014-1830", "GHSA-652x-xj99-gmcc"]}, {"id": "PYSEC-2015-17", "summary": null, "modified": "2023-11-08T03:57:51.982387Z", "aliases": ["CVE-2015-2296", "GHSA-pg2w-x9wp-vw92"]}, {"id": "PYSEC-2018-28", "summary": null, "modified": "2023-11-08T04:00:04.815794Z", "aliases": ["CVE-2018-18074", "GHSA-x84v-xcm2-53pg"]}, {"id": "PYSEC-2023-74", "summary": null, "modified": "2023-11-08T04:12:35.436175Z", "aliases": ["CVE-2023-32681", "GHSA-j8r2-6x86-q33q"]}]}}