{"url":"https://pypi.sbomify.com/package/altrios/1.1.0","markdown_url":"https://pypi.sbomify.com/package/altrios/1.1.0.md","name":"altrios","version":"1.1.0","purl":"pkg:pypi/altrios@1.1.0","summary":"Tool for modeling and optimization of advanced locomotive powertrains for freight rail decarbonization.","author":"Chad Baker, Lead Developer, Nick Reinicke, Developer, Matt Bruchon, Developer, Saad Akhtar, Developer, Steven Shi, Developer, Jinghu Hu, Developer, Grant Payne, Developer, Jason Lustbader, PI, Garrett Anderson, Developer, Joel Allardyce, Developer, Prativa Hartnett, Developer, Steve Fritz, SwRI Lead, Tyler Dick, Co-PI","project_urls":{"Homepage":"https://www.nlr.gov/transportation/altrios","source":"https://github.com/NatLabRockies/altrios"},"requires_python":"<3.12,>=3.10","license":null,"classifiers":["License :: OSI Approved :: BSD License","Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX","Programming Language :: Python :: 3"],"wheels":[{"filename":"altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/ec/bd/9faf4c7514922589a6a971289a9d07f56cf1d71d962ed58cbebe9524bd10/altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"2124bc92-71ce-58b4-a0a7-efa80dba3251","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2124bc92-71ce-58b4-a0a7-efa80dba3251/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/76/07/e0fd151cff22f9783b96c2c58a618e3a7df76362e4293826ebdc7439a772/altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"99889444-1654-5117-a0c2-ef67c31e40ec","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/99889444-1654-5117-a0c2-ef67c31e40ec/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/6d/57/1725b3e2670c51d25356e115c36ad65f09f614489ef30cca2ced3fd62239/altrios-1.1.0-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"d2878eae-5f35-5c55-ba4a-a031c3bda361","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d2878eae-5f35-5c55-ba4a-a031c3bda361/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/5c/bc/9472bfe73a20942ad398134681630ea30d68be1b6852ea4c97db3080acfb/altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"0d397497-15c8-5f8e-9cce-650a31d644e5","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0d397497-15c8-5f8e-9cce-650a31d644e5/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/f5/4c/d5e1213c9e80c09fb3992cbde27daa63cf06f33a97dd34ba1883e791d746/altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"97ed2277-239a-5abb-aee0-907b0f7092c5","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/97ed2277-239a-5abb-aee0-907b0f7092c5/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","url":"https://files.pythonhosted.org/packages/11/91/c3c998876a5c459f7f725ca7c16f4729843f19131ae2bc54972d6abd7cf5/altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","sboms":[{"artifact_uuid":"42109a75-f314-55d3-9e99-39f4cd850650","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/42109a75-f314-55d3-9e99-39f4cd850650/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"altrios-1.1.0-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/71/bf/fa7e8146e2f93dba849611007e57b541c10b209f401c9ff3f4edb1a5b4cf/altrios-1.1.0-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"3f3cc6d6-9ed5-5035-835d-b8dace9f94a7","path":"altrios-1.1.0.dist-info/sboms/altrios-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3f3cc6d6-9ed5-5035-835d-b8dace9f94a7/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"NatLabRockies/altrios","workflow":"wheels.yaml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.10":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/NatLabRockies/altrios","1.3.6.1.4.1.57264.1.13":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.15":"645044120","1.3.6.1.4.1.57264.1.16":"https://github.com/NatLabRockies","1.3.6.1.4.1.57264.1.17":"1906800","1.3.6.1.4.1.57264.1.18":"https://github.com/NatLabRockies/altrios/.github/workflows/wheels.yaml@refs/tags/v1.1.1","1.3.6.1.4.1.57264.1.19":"2c2427049bb9e40f475f2494dd9d8a68cf910e3a","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/NatLabRockies/altrios/actions/runs/33013605494/attempts/2","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":true,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.41","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.41","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.10.1","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.10.1","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"GHSA-6g2r-675j-hx59","aliases":[],"summary":"xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release","severity":"low","score":2.3,"package":"xxhash-rust","version":"0.8.15","ecosystem":"crates.io","purl":"pkg:cargo/xxhash-rust@0.8.15","fixed":["0.8.16"],"url":"https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.98","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.98","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2024-0384","aliases":[],"summary":"`instant` is unmaintained","severity":"unknown","score":null,"package":"instant","version":"0.1.13","ecosystem":"crates.io","purl":"pkg:cargo/instant@0.1.13","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0384","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.5","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.5","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2024-0370","aliases":[],"summary":"proc-macro-error is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error","version":"1.0.4","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error@1.0.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0370","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.45.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.45.1","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2024-0320","aliases":[],"summary":"yaml-rust is unmaintained.","severity":"unknown","score":null,"package":"yaml-rust","version":"0.4.5","ecosystem":"crates.io","purl":"pkg:cargo/yaml-rust@0.4.5","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0320","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.15+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.15%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["altrios-1.1.0-cp310-cp310-macosx_10_12_universal2.whl","altrios-1.1.0-cp310-cp310-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp310-cp310-win_amd64.whl","altrios-1.1.0-cp311-cp311-macosx_10_12_universal2.whl","altrios-1.1.0-cp311-cp311-manylinux_2_28_x86_64.whl","altrios-1.1.0-cp311-cp311-manylinux_2_39_x86_64.whl","altrios-1.1.0-cp311-cp311-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":3,"low":2,"unknown":25}}}