{"data":{"slug":"osu-nlp-group-hipporag","name":"HippoRAG","trust":{"provenance":{"is_fork":false,"github_id":805115184,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-07-11T23:07:13.231Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":0,"days_since_push":3,"last_release_at":"2025-02-27T17:29:48Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":124,"high_count":0,"last_scan_at":"2026-07-11T23:07:13.696Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-4xpc-pv4p-pm3w","severity":"low","title":"GHSA-4xpc-pv4p-pm3w","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-53mr-6c8q-9789","severity":"low","title":"GHSA-53mr-6c8q-9789","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-69x8-hrgq-fjj8","severity":"low","title":"GHSA-69x8-hrgq-fjj8","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-jjhc-v7c2-5hh6","severity":"low","title":"GHSA-jjhc-v7c2-5hh6","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-qrc4-49gv-mv9m","severity":"low","title":"GHSA-qrc4-49gv-mv9m","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-wpfp-gwwc-vwq6","severity":"low","title":"GHSA-wpfp-gwwc-vwq6","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"PYSEC-2026-388","severity":"low","title":"PYSEC-2026-388","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"PYSEC-2026-390","severity":"low","title":"PYSEC-2026-390","package":"litellm@1.73.1","location":"requirements.txt"},{"id":"GHSA-3f6c-7fw2-ppm4","severity":"low","title":"GHSA-3f6c-7fw2-ppm4","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-3mwp-wvh9-7528","severity":"low","title":"GHSA-3mwp-wvh9-7528","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-3ww4-5jv9-j5gm","severity":"low","title":"GHSA-3ww4-5jv9-j5gm","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-4qjh-9fv9-r85r","severity":"low","title":"GHSA-4qjh-9fv9-r85r","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-5jv2-g5wq-cmr4","severity":"low","title":"GHSA-5jv2-g5wq-cmr4","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-69j4-grxj-j64p","severity":"low","title":"GHSA-69j4-grxj-j64p","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-6fvq-23cw-5628","severity":"low","title":"GHSA-6fvq-23cw-5628","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-6pr9-rp53-2pmc","severity":"low","title":"GHSA-6pr9-rp53-2pmc","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-7h4p-rffg-7823","severity":"low","title":"GHSA-7h4p-rffg-7823","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-8fr4-5q9j-m8gm","severity":"low","title":"GHSA-8fr4-5q9j-m8gm","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-94f4-hr76-p5j6","severity":"low","title":"GHSA-94f4-hr76-p5j6","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-98f3-hwg4-4rf7","severity":"low","title":"GHSA-98f3-hwg4-4rf7","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-9f8f-2vmf-885j","severity":"low","title":"GHSA-9f8f-2vmf-885j","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-9pcc-gvx5-r5wm","severity":"low","title":"GHSA-9pcc-gvx5-r5wm","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-ggpf-24jw-3fcw","severity":"low","title":"GHSA-ggpf-24jw-3fcw","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-grg2-63fw-f2qr","severity":"low","title":"GHSA-grg2-63fw-f2qr","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-hf3c-wxg2-49q9","severity":"low","title":"GHSA-hf3c-wxg2-49q9","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-hgg8-fqqc-vfmw","severity":"low","title":"GHSA-hgg8-fqqc-vfmw","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-hj4w-hm2g-p6w5","severity":"low","title":"GHSA-hj4w-hm2g-p6w5","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-hjq4-87xh-g4fv","severity":"low","title":"GHSA-hjq4-87xh-g4fv","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-hpv8-x276-m59f","severity":"low","title":"GHSA-hpv8-x276-m59f","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-j828-28rj-hfhp","severity":"low","title":"GHSA-j828-28rj-hfhp","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-mgrm-fgjv-mhv8","severity":"low","title":"GHSA-mgrm-fgjv-mhv8","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-pgr7-mhp5-fgjp","severity":"low","title":"GHSA-pgr7-mhp5-fgjp","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-pmqf-x6x8-p7qw","severity":"low","title":"GHSA-pmqf-x6x8-p7qw","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-q8gq-377p-jq3r","severity":"low","title":"GHSA-q8gq-377p-jq3r","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-qh4c-xf7m-gxfc","severity":"low","title":"GHSA-qh4c-xf7m-gxfc","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-rh4j-5rhw-hr54","severity":"low","title":"GHSA-rh4j-5rhw-hr54","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-rm76-4mrf-v9r8","severity":"low","title":"GHSA-rm76-4mrf-v9r8","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-rxc4-3w6r-4v47","severity":"low","title":"GHSA-rxc4-3w6r-4v47","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-w6q7-j642-7c25","severity":"low","title":"GHSA-w6q7-j642-7c25","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-wr9h-g72x-mwhm","severity":"low","title":"GHSA-wr9h-g72x-mwhm","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-x368-4g9h-fvv4","severity":"low","title":"GHSA-x368-4g9h-fvv4","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-x3m8-f7g5-qhm7","severity":"low","title":"GHSA-x3m8-f7g5-qhm7","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-223","severity":"low","title":"PYSEC-2025-223","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-42","severity":"low","title":"PYSEC-2025-42","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-43","severity":"low","title":"PYSEC-2025-43","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-50","severity":"low","title":"PYSEC-2025-50","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-53","severity":"low","title":"PYSEC-2025-53","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-58","severity":"low","title":"PYSEC-2025-58","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-62","severity":"low","title":"PYSEC-2025-62","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2025-63","severity":"low","title":"PYSEC-2025-63","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-143","severity":"low","title":"PYSEC-2026-143","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2011","severity":"low","title":"PYSEC-2026-2011","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2012","severity":"low","title":"PYSEC-2026-2012","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2013","severity":"low","title":"PYSEC-2026-2013","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2015","severity":"low","title":"PYSEC-2026-2015","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2016","severity":"low","title":"PYSEC-2026-2016","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2017","severity":"low","title":"PYSEC-2026-2017","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2019","severity":"low","title":"PYSEC-2026-2019","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2020","severity":"low","title":"PYSEC-2026-2020","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2021","severity":"low","title":"PYSEC-2026-2021","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-2026","severity":"low","title":"PYSEC-2026-2026","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-226","severity":"low","title":"PYSEC-2026-226","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-227","severity":"low","title":"PYSEC-2026-227","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-567","severity":"low","title":"PYSEC-2026-567","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"PYSEC-2026-568","severity":"low","title":"PYSEC-2026-568","package":"vllm@0.6.6.post1","location":"requirements.txt"},{"id":"GHSA-3749-ghw9-m3mg","severity":"low","title":"GHSA-3749-ghw9-m3mg","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-53q9-r3pm-6pq6","severity":"low","title":"GHSA-53q9-r3pm-6pq6","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-887c-mr87-cxwp","severity":"low","title":"GHSA-887c-mr87-cxwp","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-c678-jfcj-6jmf","severity":"low","title":"GHSA-c678-jfcj-6jmf","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-f4hp-rmr7-r7v8","severity":"low","title":"GHSA-f4hp-rmr7-r7v8","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-qfhq-4f3w-5fph","severity":"low","title":"GHSA-qfhq-4f3w-5fph","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-rrmf-rvhw-rf47","severity":"low","title":"GHSA-rrmf-rvhw-rf47","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-vgrw-7cvw-pwgx","severity":"low","title":"GHSA-vgrw-7cvw-pwgx","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-x3gm-94wq-g975","severity":"low","title":"GHSA-x3gm-94wq-g975","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-191","severity":"low","title":"PYSEC-2025-191","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-198","severity":"low","title":"PYSEC-2025-198","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-203","severity":"low","title":"PYSEC-2025-203","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-204","severity":"low","title":"PYSEC-2025-204","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-205","severity":"low","title":"PYSEC-2025-205","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-206","severity":"low","title":"PYSEC-2025-206","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-207","severity":"low","title":"PYSEC-2025-207","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-208","severity":"low","title":"PYSEC-2025-208","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-209","severity":"low","title":"PYSEC-2025-209","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2025-41","severity":"low","title":"PYSEC-2025-41","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2026-139","severity":"low","title":"PYSEC-2026-139","package":"torch@2.5.1","location":"requirements.txt"},{"id":"PYSEC-2026-1970","severity":"low","title":"PYSEC-2026-1970","package":"torch@2.5.1","location":"requirements.txt"},{"id":"GHSA-29pf-2h5f-8g72","severity":"low","title":"GHSA-29pf-2h5f-8g72","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-37mw-44qp-f5jm","severity":"low","title":"GHSA-37mw-44qp-f5jm","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-4w7r-h757-3r74","severity":"low","title":"GHSA-4w7r-h757-3r74","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-59p9-h35m-wg4g","severity":"low","title":"GHSA-59p9-h35m-wg4g","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-69w3-r845-3855","severity":"low","title":"GHSA-69w3-r845-3855","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-6rvg-6v2m-4j46","severity":"low","title":"GHSA-6rvg-6v2m-4j46","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-9356-575x-2w9m","severity":"low","title":"GHSA-9356-575x-2w9m","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-fpwr-67px-3qhx","severity":"low","title":"GHSA-fpwr-67px-3qhx","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-hxxf-235m-72v3","severity":"low","title":"GHSA-hxxf-235m-72v3","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-jjph-296x-mrcr","severity":"low","title":"GHSA-jjph-296x-mrcr","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-phhr-52qp-3mj4","severity":"low","title":"GHSA-phhr-52qp-3mj4","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-q2wp-rjmx-x6x9","severity":"low","title":"GHSA-q2wp-rjmx-x6x9","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-qq3j-4f4f-9583","severity":"low","title":"GHSA-qq3j-4f4f-9583","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-qxrp-vhvm-j765","severity":"low","title":"GHSA-qxrp-vhvm-j765","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-rcv9-qm8p-9p6j","severity":"low","title":"GHSA-rcv9-qm8p-9p6j","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"GHSA-wrfc-pvp9-mr9g","severity":"low","title":"GHSA-wrfc-pvp9-mr9g","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2024-227","severity":"low","title":"PYSEC-2024-227","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2024-228","severity":"low","title":"PYSEC-2024-228","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2024-229","severity":"low","title":"PYSEC-2024-229","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-211","severity":"low","title":"PYSEC-2025-211","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-212","severity":"low","title":"PYSEC-2025-212","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-213","severity":"low","title":"PYSEC-2025-213","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-214","severity":"low","title":"PYSEC-2025-214","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-215","severity":"low","title":"PYSEC-2025-215","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-216","severity":"low","title":"PYSEC-2025-216","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-217","severity":"low","title":"PYSEC-2025-217","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-218","severity":"low","title":"PYSEC-2025-218","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2025-40","severity":"low","title":"PYSEC-2025-40","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1977","severity":"low","title":"PYSEC-2026-1977","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1980","severity":"low","title":"PYSEC-2026-1980","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1981","severity":"low","title":"PYSEC-2026-1981","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1982","severity":"low","title":"PYSEC-2026-1982","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1983","severity":"low","title":"PYSEC-2026-1983","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1984","severity":"low","title":"PYSEC-2026-1984","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1985","severity":"low","title":"PYSEC-2026-1985","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1986","severity":"low","title":"PYSEC-2026-1986","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1987","severity":"low","title":"PYSEC-2026-1987","package":"transformers@4.45.2","location":"requirements.txt"},{"id":"PYSEC-2026-1988","severity":"low","title":"PYSEC-2026-1988","package":"transformers@4.45.2","location":"requirements.txt"}],"methodology":"github_public_v1"}}