{"data":{"ecosystem":"pypi","name":"mistralai","url":"https://aisecwatch.com/packages/pypi/mistralai","latestVersion":"3.2.0","firstReleaseAt":"2023-12-09T13:45:28.716Z","repository":"https://github.com/mistralai/client-python.git","llm":{"exposure":"direct","depth":0,"integratedAt":"2023-12-09T13:45:28.716Z","integratedVersion":"0.0.7","sdks":["mistralai"],"path":[]},"authority":{"profile":["http","mcp_tools"],"fromDependencies":["pypi:mcp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"mcp","versionSpec":"<3.0,>=2.2.0","scope":"extra:agents"},{"ecosystem":"pypi","name":"aioboto3","versionSpec":"<13.0.0,>=12.4.0","scope":"extra:workflow-payload-offloading"},{"ecosystem":"pypi","name":"authlib","versionSpec":"<2.0,>=1.8.0","scope":"extra:agents"},{"ecosystem":"pypi","name":"azure-identity","versionSpec":"<2.0.0,>=1.25.0","scope":"extra:workflow-payload-offloading"},{"ecosystem":"pypi","name":"azure-storage-blob","versionSpec":"<13.0.0,>=12.28.0","scope":"extra:workflow-payload-offloading"},{"ecosystem":"pypi","name":"cryptography","versionSpec":"<51.0.0,>=50.0.0","scope":"extra:workflow-payload-encryption"},{"ecosystem":"pypi","name":"eval-type-backport","versionSpec":">=0.2.0","scope":"runtime"},{"ecosystem":"pypi","name":"gcloud-aio-storage","versionSpec":"<10.0.0,>=9.3.0","scope":"extra:workflow-payload-offloading"},{"ecosystem":"pypi","name":"google-auth","versionSpec":">=2.27.0","scope":"extra:gcp"},{"ecosystem":"pypi","name":"griffe","versionSpec":"<2.0,>=1.7.3","scope":"extra:agents"},{"ecosystem":"pypi","name":"httpx2","versionSpec":">=2.13.0","scope":"runtime"},{"ecosystem":"pypi","name":"jsonpath-python","versionSpec":">=1.0.6","scope":"runtime"},{"ecosystem":"pypi","name":"msgpack","versionSpec":"<2.0.0,>=1.1.0","scope":"extra:workflow-payload-compression"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":"<2.0.0,>=1.33.1","scope":"runtime"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp-proto-http","versionSpec":"<2.0.0,>=1.33.1","scope":"extra:telemetry"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"<2.0.0,>=1.33.1","scope":"extra:telemetry"},{"ecosystem":"pypi","name":"opentelemetry-semantic-conventions","versionSpec":">=0.60b1","scope":"runtime"},{"ecosystem":"pypi","name":"pydantic","versionSpec":">=2.11.2","scope":"runtime"},{"ecosystem":"pypi","name":"python-dateutil","versionSpec":">=2.8.2","scope":"runtime"},{"ecosystem":"pypi","name":"requests","versionSpec":">=2.32.3","scope":"extra:gcp"},{"ecosystem":"pypi","name":"typing-inspection","versionSpec":">=0.4.0","scope":"runtime"},{"ecosystem":"pypi","name":"websockets","versionSpec":">=13.0","scope":"extra:realtime"},{"ecosystem":"pypi","name":"zstandard","versionSpec":"<0.26,>=0.25.0","scope":"extra:workflow-payload-compression"}],"advisories":[{"id":"ce5ef3bc-9205-4f2d-b206-f0960314ee84","url":"https://aisecwatch.com/issues/ce5ef3bc-9205-4f2d-b206-f0960314ee84","cveId":null,"title":"GHSA-wx9m-wx4f-4cmg: Malicious dropper in mistralai 2.4.6 PyPI package","headline":null,"severity":"critical","publishedAt":"2026-05-18T17:55:27.000Z","affected":["mistralai@= 2.4.6"],"epssScore":null,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:49:15.643Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}