[
  {
    "package": "flask",
    "cve_id": "CVE-2023-30861",
    "severity": "high",
    "affected_from": "2.2.0",
    "fixed_version": "2.2.5",
    "description": "Session cookie sent without Secure attribute on HTTPS responses allowing session hijacking"
  },
  {
    "package": "requests",
    "cve_id": "CVE-2023-32681",
    "severity": "medium",
    "affected_from": "2.3.0",
    "fixed_version": "2.31.0",
    "description": "Proxy-Authorization header leaked to destination server during HTTPS redirects"
  },
  {
    "package": "django",
    "cve_id": "CVE-2023-31047",
    "severity": "critical",
    "affected_from": "4.1.0",
    "fixed_version": "4.1.9",
    "description": "Potential bypass of file upload validation when using multiple file upload fields"
  },
  {
    "package": "pillow",
    "cve_id": "CVE-2023-44271",
    "severity": "high",
    "affected_from": "9.0.0",
    "fixed_version": "9.5.0",
    "description": "Denial of service via uncontrolled resource consumption when processing crafted images"
  },
  {
    "package": "urllib3",
    "cve_id": "CVE-2023-43804",
    "severity": "high",
    "affected_from": "1.26.0",
    "fixed_version": "1.26.18",
    "description": "Cookie header not stripped during cross-origin HTTP redirect allowing credential leakage"
  },
  {
    "package": "numpy",
    "cve_id": "CVE-2021-99999",
    "severity": "low",
    "affected_from": "1.25.0",
    "fixed_version": "1.25.1",
    "description": "Buffer overflow in specific array operations (does NOT affect 1.24.x)"
  },
  {
    "package": "sqlalchemy",
    "cve_id": "CVE-2021-88888",
    "severity": "medium",
    "affected_from": "1.5.0",
    "fixed_version": "1.5.2",
    "description": "SQL injection in specific ORM filter (does NOT affect 1.4.x)"
  },
  {
    "package": "celery",
    "cve_id": "CVE-2022-77777",
    "severity": "low",
    "affected_from": "5.3.0",
    "fixed_version": "5.3.2",
    "description": "Task serialization issue (does NOT affect 5.2.x)"
  }
]
