{"data":{"ecosystem":"pypi","name":"stanza","url":"https://aisecwatch.com/packages/pypi/stanza","latestVersion":"1.15.0","firstReleaseAt":"2017-05-21T21:52:17.313Z","repository":"https://github.com/stanfordnlp/stanza","llm":{"exposure":"direct","depth":0,"integratedAt":"2022-04-23T05:55:13.209Z","integratedVersion":"1.4.0","sdks":["huggingface"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"datasets","versionSpec":null,"scope":"extra:datasets"},{"ecosystem":"pypi","name":"huggingface-hub","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"peft","versionSpec":">=0.6.1","scope":"extra:transformers"},{"ecosystem":"pypi","name":"pythainlp","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"transformers","versionSpec":">=3.0.0","scope":"extra:transformers"},{"ecosystem":"pypi","name":"check-manifest","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"coverage","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"emoji","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"ipython","versionSpec":null,"scope":"extra:visualization"},{"ecosystem":"pypi","name":"jieba","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"matplotlib","versionSpec":null,"scope":"extra:matplotlib"},{"ecosystem":"pypi","name":"morphseg","versionSpec":">=0.2.5.1","scope":"extra:morphseg"},{"ecosystem":"pypi","name":"networkx","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"orjson","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"platformdirs","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"protobuf","versionSpec":">=3.15.0","scope":"runtime"},{"ecosystem":"pypi","name":"pytest","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"python-crfsuite","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"spacy","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"streamlit","versionSpec":null,"scope":"extra:visualization"},{"ecosystem":"pypi","name":"sudachidict-core","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"sudachipy","versionSpec":null,"scope":"extra:tokenizers"},{"ecosystem":"pypi","name":"tomli","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":">=1.13.0","scope":"runtime"},{"ecosystem":"pypi","name":"tqdm","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"udtools","versionSpec":">=0.2.4","scope":"runtime"}],"advisories":[{"id":"07eccfe5-d1d5-4133-aa35-05bd62e42c1d","url":"https://aisecwatch.com/issues/07eccfe5-d1d5-4133-aa35-05bd62e42c1d","cveId":"CVE-2026-54499","title":"CVE-2026-54499: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…","headline":"Stanza model loaders arbitrary code execution via malicious pickle files","severity":"high","publishedAt":"2026-07-08T23:16:54.690Z","affected":["stanza@<= 1.12.1 (fixed: 1.12.2)"],"epssScore":0.00519,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T22:31:51.032Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}