{"url":"https://pypi.sbomify.com/package/adamo/1.0.19","markdown_url":"https://pypi.sbomify.com/package/adamo/1.0.19.md","name":"adamo","version":"1.0.19","purl":"pkg:pypi/adamo@1.0.19","summary":"Canonical Rust-backed Adamo robot SDK","author":null,"project_urls":{},"requires_python":">=3.8","license":"Apache-2.0","classifiers":[],"wheels":[{"filename":"adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/ab/0c/a40ef911529afbb52c554ba1aa28d90d5308d7c498d3fb78d81c3685a00d/adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"5d551206-0e9e-51d6-868b-5daa84206b13","path":"adamo-1.0.19.dist-info/sboms/adamo-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5d551206-0e9e-51d6-868b-5daa84206b13/download","vulnerability_count":20,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/4c/54/0d5ff1dd12c71f02fcaaedd24146e6a38a3f3f346d83ecee45ebb84265dd/adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"422c07b6-4687-51c0-b42e-6bb5c446cd73","path":"adamo-1.0.19.dist-info/sboms/adamo-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/422c07b6-4687-51c0-b42e-6bb5c446cd73/download","vulnerability_count":23,"scan_error":null},{"artifact_uuid":"59ef6d8f-4605-5b3d-b785-6d82209e3861","path":"adamo-1.0.19.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/59ef6d8f-4605-5b3d-b785-6d82209e3861/download","vulnerability_count":0,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/e5/13/23f8d8c6c3950843036654912d3d61294e1d8b106a23c7ce338f61876874/adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"17585ef8-1a02-5b1c-b6f9-383680c6283e","path":"adamo-1.0.19.dist-info/sboms/adamo-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/17585ef8-1a02-5b1c-b6f9-383680c6283e/download","vulnerability_count":23,"scan_error":null},{"artifact_uuid":"22acc2e4-0378-51a8-8b12-58d2cd421ef8","path":"adamo-1.0.19.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/22acc2e4-0378-51a8-8b12-58d2cd421ef8/download","vulnerability_count":0,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-32829","aliases":["GHSA-vvp9-7p8x-rfvv","RUSTSEC-2026-0041"],"summary":"Decompressing invalid data can leak information from uninitialized memory or reused output buffer","severity":"high","score":8.2,"package":"lz4_flex","version":"0.10.0","ecosystem":"crates.io","purl":"pkg:cargo/lz4_flex@0.10.0","fixed":["0.11.6"],"url":"https://insights.sbomify.com/CVE-2026-32829/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.17","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.17?download_url=file:%2F%2F..%2F..%2Fvendor%2Fquinn-proto","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0343","aliases":["GHSA-ppcp-v39w-8jq2"],"summary":"Outgoing datagram buffer accounting can panic the sender in quinn-proto","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.17","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.17?download_url=file:%2F%2F..%2F..%2Fvendor%2Fquinn-proto","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0343","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.10","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-25537","aliases":["GHSA-h395-gr6q-cpjc"],"summary":"jsonwebtoken has Type Confusion that leads to potential authorization bypass","severity":"medium","score":5.5,"package":"jsonwebtoken","version":"9.3.1","ecosystem":"crates.io","purl":"pkg:cargo/jsonwebtoken@9.3.1","fixed":["10.3.0"],"url":"https://insights.sbomify.com/CVE-2026-25537/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0150","aliases":[],"summary":"audiopus_sys is unmaintained","severity":"unknown","score":null,"package":"audiopus_sys","version":"0.2.2","ecosystem":"crates.io","purl":"pkg:cargo/audiopus_sys@0.2.2","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0150","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2024-0388","aliases":[],"summary":"`derivative` is unmaintained; consider using an alternative","severity":"unknown","score":null,"package":"derivative","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/derivative@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0388","wheels":["adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-92612","aliases":["GHSA-8mq4-3mwq-qvg6","RUSTSEC-2026-0294"],"summary":"Unsoundness in UTF-8 'String' trait","severity":"unknown","score":null,"package":"iceoryx2-bb-container","version":"0.8.1","ecosystem":"crates.io","purl":"pkg:cargo/iceoryx2-bb-container@0.8.1","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2026-92612/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.4","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.4","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.17","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.17?download_url=file:%2F%2F..%2F..%2Fvendor%2Fquinn-proto","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["adamo-1.0.19-cp38-abi3-macosx_11_0_arm64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_aarch64.whl","adamo-1.0.19-cp38-abi3-manylinux_2_28_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":4,"medium":5,"low":2,"unknown":12}}}