[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-25990":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":56,"downstream":58,"duplicates":80,"related":81,"reserved_at":9,"published_at":89,"modified_at":90,"state":91,"summary":92,"references_raw":101,"kevs":267,"epss":268,"epss_history":271,"metrics":542,"affected":569},"CVE-2026-25990","Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[],[22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55],"GHSA-cfh3-3jmp-rvhc","BIT-pillow-2026-25990","PYSEC-2026-2249","UBUNTU-CVE-2026-25990","DEBIAN-CVE-2026-25990","CGA-47fw-wc2r-46mr","CGA-54gj-r862-mwvv","CGA-668g-fpmv-xhx5","CGA-6x35-pw3r-f2h4","CGA-72qg-fcxv-qcg7","CGA-896c-c2jc-88cq","CGA-93ff-93jq-p6qm","CGA-cj9q-4qph-gqm9","CGA-3hvh-cwhg-rh2f","CGA-3jwv-g686-wr7j","CGA-4mx2-6vrc-wjh2","CGA-5cfw-jc5c-fhxr","CGA-8mjw-gx7m-2j69","CGA-8vxm-7jx5-99cf","CGA-fggv-2gq6-r9rj","CGA-fh6v-f7q5-42mj","CGA-g962-rqww-9fw2","CGA-gcw8-vqqh-r9qj","CGA-gp5g-mx45-j45m","CGA-m876-qcmf-494h","CGA-ppcq-52q5-m3h6","CGA-q95f-8qqv-8w5p","CGA-rghx-p9q8-gvg2","CGA-rwx6-c326-cxgq","CGA-v4rq-4cg6-r852","CGA-w65j-6j4r-q8xr","CGA-xhwh-7cr5-v786","CGA-xxjc-vwhq-3j69","USN-8047-1",[57],{"_key":25},[59,61,63,65,67,68,69,70,72,74,76,78],{"_key":60},"DSA-6147-1",{"_key":62},"OPENSUSE-SU-2026:10198-1",{"_key":64},"OPENSUSE-SU-2026:20458-1",{"_key":66},"SUSE-SU-2026:20992-1",{"_key":55},{"_key":26},{"_key":25},{"_key":71},"RHSA-2026:14873",{"_key":73},"RHSA-2026:14874",{"_key":75},"RHSA-2026:28385",{"_key":77},"RHSA-2026:6277",{"_key":79},"RHSA-2026:6278",[],[82,83,84,85,86,87],{"_key":62},{"_key":64},{"_key":66},{"_key":25},{"_key":55},{"_key":88},"CGA-W7GH-42X2-JFQF","2026-02-11T20:53:52.524Z","2026-09-16T12:04:20.759Z","Modified",{"cisa_kev":93,"cisa_ransomware":93,"cisa_vendor":9,"epss_severity":94,"epss_score":95,"severity":96,"severity_score":97,"severity_version":98,"severity_source":99,"severity_vector":100,"severity_status":91},false,"low",0.00374,"high",8.6,"v4.0","cve.org","CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",[102,116,120,124,129,133,140,144,150,156,161,166,170,174,178,182,186,190,194,198,202,206,210,214,218,222,226,230,234,238,242,246,250,254,258,263],{"url":103,"sources":104,"tags":110},"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc",[105,99,106,107,108,109],"osv_pypi","nvd","osv_ubuntu","osv_wolfi","osv_chainguard",[111,112,113,114,115],"WEB","X Refsource CONFIRM","Vendor Advisory","Advisory","REPORT",{"url":117,"sources":118,"tags":119},"https://github.com/python-pillow/Pillow/pull/9427",[105],[111],{"url":121,"sources":122,"tags":123},"https://github.com/python-pillow/Pillow/commit/54ba4db542ad3c7b918812a4e2d69c27735a3199",[105],[111],{"url":125,"sources":126,"tags":127},"https://github.com/python-pillow/Pillow",[105],[128],"PACKAGE",{"url":130,"sources":131,"tags":132},"https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html",[105],[111],{"url":134,"sources":135,"tags":136},"https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa",[99,106,105,108,109],[137,111,138,139],"X Refsource MISC","Patch","FIX",{"url":141,"sources":142,"tags":143},"https://nvd.nist.gov/vuln/detail/CVE-2026-25990",[105,108,109],[114],{"url":145,"sources":146,"tags":147},"http://www.openwall.com/lists/oss-security/2026/02/12/1",[99,106,105,107,108,109],[148,138,149,139,115,111],"Mailing List","Third Party Advisory",{"url":151,"sources":152,"tags":153},"https://access.redhat.com/security/cve/CVE-2026-25990",[99,105,106,108,109],[154,155,111,114],"VDB Entry","X Refsource REDHAT",{"url":157,"sources":158,"tags":159},"https://bugzilla.redhat.com/show_bug.cgi?id=2439170",[99,105,106,108,109],[160,155,115],"Issue Tracking",{"url":162,"sources":163,"tags":164},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25990.json",[99,105,106,108,109],[165,111],"X Sadp Csaf Vex",{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2026:6278",[99,105,106,108,109],[113,155,114],{"url":171,"sources":172,"tags":173},"https://access.redhat.com/errata/RHSA-2026:14874",[99,105,106,108,109],[113,155,114],{"url":175,"sources":176,"tags":177},"https://access.redhat.com/errata/RHSA-2026:6277",[99,105,106,108,109],[113,155,114],{"url":179,"sources":180,"tags":181},"https://access.redhat.com/errata/RHSA-2026:14873",[99,105,106,108,109],[113,155,114],{"url":183,"sources":184,"tags":185},"https://access.redhat.com/errata/RHSA-2026:28385",[99,105,106,108,109],[113,155,114],{"url":187,"sources":188,"tags":189},"https://access.redhat.com/errata/RHSA-2026:4128",[99,105,106,108,109],[113,155,114],{"url":191,"sources":192,"tags":193},"https://access.redhat.com/errata/RHSA-2026:3461",[99,105,106,108,109],[113,155,114],{"url":195,"sources":196,"tags":197},"https://access.redhat.com/errata/RHSA-2026:3462",[99,105,106,108,109],[113,155,114],{"url":199,"sources":200,"tags":201},"https://access.redhat.com/errata/RHSA-2026:16174",[99,105,106,108,109],[113,155,114],{"url":203,"sources":204,"tags":205},"https://access.redhat.com/errata/RHSA-2026:6308",[99,105,106,108,109],[113,155,114],{"url":207,"sources":208,"tags":209},"https://access.redhat.com/errata/RHSA-2026:6309",[99,105,106,108,109],[113,155,114],{"url":211,"sources":212,"tags":213},"https://access.redhat.com/errata/RHSA-2026:10184",[99,105,106,108,109],[113,155,114],{"url":215,"sources":216,"tags":217},"https://access.redhat.com/errata/RHSA-2026:19712",[99,105,106,108,109],[113,155,114],{"url":219,"sources":220,"tags":221},"https://access.redhat.com/errata/RHSA-2026:4942",[99,105,106,108,109],[113,155,114],{"url":223,"sources":224,"tags":225},"https://access.redhat.com/errata/RHSA-2026:6568",[99,105,106,108,109],[113,155,114],{"url":227,"sources":228,"tags":229},"https://access.redhat.com/errata/RHSA-2026:6497",[99,105,106,108,109],[113,155,114],{"url":231,"sources":232,"tags":233},"https://access.redhat.com/errata/RHSA-2026:6567",[99,105,106,108,109],[113,155,114],{"url":235,"sources":236,"tags":237},"https://access.redhat.com/errata/RHSA-2026:5665",[99,105,106,108,109],[113,155,114],{"url":239,"sources":240,"tags":241},"https://access.redhat.com/errata/RHSA-2026:5168",[99,105,106,108,109],[113,155,114],{"url":243,"sources":244,"tags":245},"https://access.redhat.com/errata/RHSA-2026:42644",[99,106,108,109],[113,155,114],{"url":247,"sources":248,"tags":249},"https://ubuntu.com/security/CVE-2026-25990",[107],[115],{"url":251,"sources":252,"tags":253},"https://www.cve.org/CVERecord?id=CVE-2026-25990",[107],[115],{"url":255,"sources":256,"tags":257},"https://ubuntu.com/security/notices/USN-8047-1",[107],[114],{"url":259,"sources":260,"tags":262},"https://security-tracker.debian.org/tracker/CVE-2026-25990",[261],"osv_debian",[114],{"url":264,"sources":265,"tags":266},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25990.json",[108,109],[114],[],{"date":269,"score":95,"percentile":270},"2026-09-19",0.31283,[272,276,279,283,285,288,292,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,345,348,351,354,357,360,362,365,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,435,438,441,444,447,450,453,455,458,461,464,467,470,473,477,480,483,486,489,492,494,497,500,503,506,510,513,516,519,522,525,527,530,533,536,539],{"date":273,"score":274,"percentile":275},"2026-02-12",0.00015,0.02604,{"date":277,"score":274,"percentile":278},"2026-02-13",0.02637,{"date":280,"score":281,"percentile":282},"2026-02-14",0.00013,0.0187,{"date":284,"score":281,"percentile":282},"2026-02-15",{"date":286,"score":281,"percentile":287},"2026-02-16",0.01855,{"date":289,"score":290,"percentile":291},"2026-02-17",0.00017,0.03489,{"date":293,"score":290,"percentile":294},"2026-02-18",0.0373,{"date":296,"score":290,"percentile":297},"2026-02-19",0.03751,{"date":299,"score":290,"percentile":300},"2026-02-20",0.03749,{"date":302,"score":290,"percentile":303},"2026-02-21",0.03746,{"date":305,"score":290,"percentile":306},"2026-02-22",0.03741,{"date":308,"score":290,"percentile":309},"2026-02-23",0.03724,{"date":311,"score":290,"percentile":312},"2026-02-24",0.03709,{"date":314,"score":290,"percentile":315},"2026-02-25",0.03706,{"date":317,"score":290,"percentile":318},"2026-02-26",0.03694,{"date":320,"score":290,"percentile":321},"2026-02-27",0.03758,{"date":323,"score":290,"percentile":324},"2026-02-28",0.03757,{"date":326,"score":290,"percentile":327},"2026-03-01",0.03818,{"date":329,"score":290,"percentile":330},"2026-03-02",0.03845,{"date":332,"score":290,"percentile":333},"2026-03-03",0.03861,{"date":335,"score":290,"percentile":336},"2026-03-04",0.03789,{"date":338,"score":290,"percentile":339},"2026-03-05",0.03831,{"date":341,"score":290,"percentile":342},"2026-03-06",0.03813,{"date":344,"score":290,"percentile":327},"2026-03-07",{"date":346,"score":290,"percentile":347},"2026-03-08",0.0382,{"date":349,"score":290,"percentile":350},"2026-03-09",0.03799,{"date":352,"score":290,"percentile":353},"2026-03-10",0.03808,{"date":355,"score":290,"percentile":356},"2026-03-11",0.03805,{"date":358,"score":290,"percentile":359},"2026-03-12",0.0383,{"date":361,"score":290,"percentile":327},"2026-03-13",{"date":363,"score":290,"percentile":364},"2026-03-14",0.03791,{"date":366,"score":367,"percentile":368},"2026-03-15",0.00018,0.04383,{"date":370,"score":367,"percentile":371},"2026-03-16",0.04386,{"date":373,"score":367,"percentile":374},"2026-03-17",0.04378,{"date":376,"score":367,"percentile":377},"2026-03-18",0.04393,{"date":379,"score":367,"percentile":380},"2026-03-19",0.04414,{"date":382,"score":367,"percentile":383},"2026-03-20",0.0442,{"date":385,"score":367,"percentile":386},"2026-03-21",0.04617,{"date":388,"score":367,"percentile":389},"2026-03-22",0.04609,{"date":391,"score":367,"percentile":392},"2026-03-23",0.04606,{"date":394,"score":367,"percentile":395},"2026-03-24",0.04591,{"date":397,"score":367,"percentile":398},"2026-03-25",0.04628,{"date":400,"score":367,"percentile":401},"2026-03-26",0.04663,{"date":403,"score":367,"percentile":404},"2026-03-27",0.04665,{"date":406,"score":367,"percentile":407},"2026-03-28",0.04668,{"date":409,"score":367,"percentile":410},"2026-03-29",0.04662,{"date":412,"score":367,"percentile":413},"2026-03-30",0.04643,{"date":415,"score":367,"percentile":416},"2026-03-31",0.04619,{"date":418,"score":367,"percentile":419},"2026-04-01",0.04637,{"date":421,"score":367,"percentile":422},"2026-04-02",0.04699,{"date":424,"score":367,"percentile":425},"2026-04-03",0.04712,{"date":427,"score":367,"percentile":428},"2026-04-04",0.04711,{"date":430,"score":367,"percentile":431},"2026-04-05",0.04707,{"date":433,"score":367,"percentile":434},"2026-04-06",0.04713,{"date":436,"score":367,"percentile":437},"2026-04-07",0.04727,{"date":439,"score":367,"percentile":440},"2026-04-08",0.0476,{"date":442,"score":367,"percentile":443},"2026-04-09",0.04773,{"date":445,"score":367,"percentile":446},"2026-04-10",0.04771,{"date":448,"score":367,"percentile":449},"2026-04-11",0.04764,{"date":451,"score":367,"percentile":452},"2026-04-12",0.04744,{"date":454,"score":367,"percentile":437},"2026-04-13",{"date":456,"score":367,"percentile":457},"2026-04-14",0.04684,{"date":459,"score":367,"percentile":460},"2026-04-15",0.04683,{"date":462,"score":367,"percentile":463},"2026-04-16",0.04694,{"date":465,"score":367,"percentile":466},"2026-04-17",0.04701,{"date":468,"score":367,"percentile":469},"2026-04-18",0.04702,{"date":471,"score":367,"percentile":472},"2026-04-19",0.04693,{"date":474,"score":475,"percentile":476},"2026-04-20",0.00019,0.04996,{"date":478,"score":475,"percentile":479},"2026-04-21",0.05161,{"date":481,"score":475,"percentile":482},"2026-04-22",0.05174,{"date":484,"score":475,"percentile":485},"2026-04-23",0.05193,{"date":487,"score":475,"percentile":488},"2026-04-24",0.05188,{"date":490,"score":475,"percentile":491},"2026-04-25",0.05231,{"date":493,"score":475,"percentile":491},"2026-04-26",{"date":495,"score":475,"percentile":496},"2026-04-27",0.05219,{"date":498,"score":475,"percentile":499},"2026-04-28",0.05214,{"date":501,"score":475,"percentile":502},"2026-04-29",0.05232,{"date":504,"score":475,"percentile":505},"2026-04-30",0.05242,{"date":507,"score":508,"percentile":509},"2026-05-01",0.00014,0.0282,{"date":511,"score":508,"percentile":512},"2026-05-02",0.02802,{"date":514,"score":508,"percentile":515},"2026-05-03",0.02804,{"date":517,"score":508,"percentile":518},"2026-05-04",0.02797,{"date":520,"score":508,"percentile":521},"2026-05-05",0.02789,{"date":523,"score":508,"percentile":524},"2026-05-06",0.02782,{"date":526,"score":508,"percentile":515},"2026-05-07",{"date":528,"score":508,"percentile":529},"2026-05-08",0.02813,{"date":531,"score":508,"percentile":532},"2026-05-09",0.02838,{"date":534,"score":508,"percentile":535},"2026-05-10",0.02846,{"date":537,"score":508,"percentile":538},"2026-05-11",0.02844,{"date":540,"score":508,"percentile":541},"2026-05-12",0.02845,[543,551,558,560,563,565,567],{"source":99,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":544,"cvss_v4_0":550},{"baseScore":545,"baseSeverity":546,"vectorString":547,"impactScore":548,"exploitabilityScore":549},7.3,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",5.7,10,{"baseScore":97,"baseSeverity":546,"vectorString":100,"impactScore":9,"exploitabilityScore":9},{"source":106,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":552,"cvss_v4_0":556},{"baseScore":553,"baseSeverity":546,"vectorString":554,"impactScore":555,"exploitabilityScore":549},7.5,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",6,{"baseScore":97,"baseSeverity":546,"vectorString":557,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":105,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":559},{"baseScore":97,"baseSeverity":9,"vectorString":100,"impactScore":9,"exploitabilityScore":9},{"source":107,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":561,"cvss_v4_0":562},{"baseScore":553,"baseSeverity":9,"vectorString":554,"impactScore":555,"exploitabilityScore":549},{"baseScore":97,"baseSeverity":9,"vectorString":100,"impactScore":9,"exploitabilityScore":9},{"source":261,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":564,"cvss_v4_0":9},{"baseScore":553,"baseSeverity":9,"vectorString":554,"impactScore":555,"exploitabilityScore":549},{"source":108,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":566},{"baseScore":97,"baseSeverity":9,"vectorString":100,"impactScore":9,"exploitabilityScore":9},{"source":109,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":568},{"baseScore":97,"baseSeverity":9,"vectorString":100,"impactScore":9,"exploitabilityScore":9},[570,582,588,594,600,604,613,619,623,629,635,639,645,651,657,663,669,675,680,683,686,690,693,705,712,721,728],{"ecosystem":571,"name":572,"vendor":573,"product":572,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":572,"source":9,"versions":575},"Chainguard","kubeflow-pipelines-visualization-server","chainguard","apk",[576],{"version":577,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":580,"version_end_type":581,"fixed_in":9},"lt2_15_0_r5",true,"ecosystem","2.15.0-r5","excluding",{"ecosystem":571,"name":583,"vendor":573,"product":583,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":583,"source":9,"versions":584},"label-studio",[585],{"version":586,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":587,"version_end_type":581,"fixed_in":9},"lt1_22_0_r4","1.22.0-r4",{"ecosystem":571,"name":589,"vendor":573,"product":589,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":589,"source":9,"versions":590},"litellm",[591],{"version":592,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":593,"version_end_type":581,"fixed_in":9},"lt1_81_12_1_r0","1.81.12.1-r0",{"ecosystem":571,"name":595,"vendor":573,"product":595,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":595,"source":9,"versions":596},"mlflow",[597],{"version":598,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":599,"version_end_type":581,"fixed_in":9},"lt3_9_0_r1","3.9.0-r1",{"ecosystem":571,"name":601,"vendor":573,"product":601,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":601,"source":9,"versions":602},"mlflow-iamguarded-compat",[603],{"version":598,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":599,"version_end_type":581,"fixed_in":9},{"ecosystem":571,"name":605,"vendor":573,"product":605,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":605,"source":9,"versions":606},"open-webui",[607,610],{"version":608,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":609,"version_end_type":581,"fixed_in":9},"lt0_8_3_r1","0.8.3-r1",{"version":611,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":612,"version_end_type":581,"fixed_in":9},"lt0_11_0_r0","0.11.0-r0",{"ecosystem":571,"name":614,"vendor":573,"product":614,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":614,"source":9,"versions":615},"pgadmin4",[616],{"version":617,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":618,"version_end_type":581,"fixed_in":9},"lt9_12_r1","9.12-r1",{"ecosystem":571,"name":620,"vendor":573,"product":620,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":620,"source":9,"versions":621},"pgadmin4-fips",[622],{"version":617,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":618,"version_end_type":581,"fixed_in":9},{"ecosystem":571,"name":624,"vendor":573,"product":624,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":624,"source":9,"versions":625},"py3.10-vllm-cuda-12.4",[626],{"version":627,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":628,"version_end_type":581,"fixed_in":9},"lt0_16_0_r0","0.16.0-r0",{"ecosystem":571,"name":630,"vendor":573,"product":630,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":630,"source":9,"versions":631},"py3.11-text-generation-inference",[632],{"version":633,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":634,"version_end_type":581,"fixed_in":9},"lt3_3_7_r7","3.3.7-r7",{"ecosystem":571,"name":636,"vendor":573,"product":636,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":636,"source":9,"versions":637},"py3.12-vllm-cuda-12.4",[638],{"version":627,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":628,"version_end_type":581,"fixed_in":9},{"ecosystem":571,"name":640,"vendor":573,"product":640,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":640,"source":9,"versions":641},"superset-5.0",[642],{"version":643,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":644,"version_end_type":581,"fixed_in":9},"lt5_0_0_r17","5.0.0-r17",{"ecosystem":571,"name":646,"vendor":573,"product":646,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":646,"source":9,"versions":647},"superset-6.0",[648],{"version":649,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":650,"version_end_type":581,"fixed_in":9},"lt6_0_0_r2","6.0.0-r2",{"ecosystem":571,"name":652,"vendor":573,"product":652,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":652,"source":9,"versions":653},"tensorflow-cpu-jupyter",[654],{"version":655,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":656,"version_end_type":581,"fixed_in":9},"lt2_20_0_r11","2.20.0-r11",{"ecosystem":571,"name":658,"vendor":573,"product":658,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":658,"source":9,"versions":659},"tensorflow-gpu-jupyter",[660],{"version":661,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":662,"version_end_type":581,"fixed_in":9},"lt2_20_0_r10","2.20.0-r10",{"ecosystem":571,"name":664,"vendor":573,"product":664,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":664,"source":9,"versions":665},"tritonserver-backend-vllm-cuda-12.9",[666],{"version":667,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":668,"version_end_type":581,"fixed_in":9},"lt25_9_0_git20251112_r7","25.9.0_git20251112-r7",{"ecosystem":571,"name":670,"vendor":573,"product":670,"cpe_part":9,"purl_type":574,"purl_namespace":573,"purl_name":670,"source":9,"versions":671},"vllm-openai-cuda-12.9",[672],{"version":673,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":674,"version_end_type":581,"fixed_in":9},"lt0_15_1_r0","0.15.1-r0",{"ecosystem":676,"name":572,"vendor":677,"product":572,"cpe_part":9,"purl_type":574,"purl_namespace":677,"purl_name":572,"source":9,"versions":678},"Wolfi","wolfi",[679],{"version":577,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":580,"version_end_type":581,"fixed_in":9},{"ecosystem":676,"name":595,"vendor":677,"product":595,"cpe_part":9,"purl_type":574,"purl_namespace":677,"purl_name":595,"source":9,"versions":681},[682],{"version":598,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":599,"version_end_type":581,"fixed_in":9},{"ecosystem":676,"name":601,"vendor":677,"product":601,"cpe_part":9,"purl_type":574,"purl_namespace":677,"purl_name":601,"source":9,"versions":684},[685],{"version":598,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":599,"version_end_type":581,"fixed_in":9},{"ecosystem":676,"name":605,"vendor":677,"product":605,"cpe_part":9,"purl_type":574,"purl_namespace":677,"purl_name":605,"source":9,"versions":687},[688,689],{"version":608,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":609,"version_end_type":581,"fixed_in":9},{"version":611,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":612,"version_end_type":581,"fixed_in":9},{"ecosystem":676,"name":646,"vendor":677,"product":646,"cpe_part":9,"purl_type":574,"purl_namespace":677,"purl_name":646,"source":9,"versions":691},[692],{"version":649,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":650,"version_end_type":581,"fixed_in":9},{"ecosystem":694,"name":695,"vendor":696,"product":695,"cpe_part":9,"purl_type":697,"purl_namespace":696,"purl_name":695,"source":9,"versions":698},"Debian","pillow","debian","deb",[699,702],{"version":700,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":701,"version_end_type":581,"fixed_in":9},"lt11_1_0_5+deb13u1","11.1.0-5+deb13u1",{"version":703,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":704,"version_end_type":581,"fixed_in":9},"lt12_1_1_1","12.1.1-1",{"ecosystem":706,"name":695,"vendor":707,"product":695,"cpe_part":9,"purl_type":697,"purl_namespace":707,"purl_name":695,"source":9,"versions":708},"Ubuntu","ubuntu",[709],{"version":710,"is_range":578,"range_type":579,"version_start":9,"version_start_type":9,"version_end":711,"version_end_type":581,"fixed_in":9},"lt11_3_0_1ubuntu1_1","11.3.0-1ubuntu1.1",{"ecosystem":713,"name":695,"vendor":713,"product":695,"cpe_part":9,"purl_type":714,"purl_namespace":9,"purl_name":695,"source":9,"versions":715},"PyPI","pypi",[716],{"version":717,"is_range":578,"range_type":579,"version_start":718,"version_start_type":719,"version_end":720,"version_end_type":581,"fixed_in":9},"gte10_3_0_lt12_1_1","10.3.0","including","12.1.1",{"ecosystem":9,"name":722,"vendor":723,"product":695,"cpe_part":724,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":725},"Pillow","python-pillow","a",[726],{"version":727,"is_range":578,"range_type":99,"version_start":718,"version_start_type":719,"version_end":720,"version_end_type":581,"fixed_in":9},">= 10.3.0, \u003C 12.1.1",{"ecosystem":9,"name":695,"vendor":729,"product":695,"cpe_part":724,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":730},"python",[731],{"version":732,"is_range":578,"range_type":733,"version_start":718,"version_start_type":719,"version_end":720,"version_end_type":581,"fixed_in":9},"gte10.3.0_lt12.1.1","cpe"]