{"url":"https://pypi.sbomify.com/package/arpeggia/0.10.2","markdown_url":"https://pypi.sbomify.com/package/arpeggia/0.10.2.md","name":"arpeggia","version":"0.10.2","purl":"pkg:pypi/arpeggia@0.10.2","summary":"A library for analyzing protein-protein interactions in PDB and mmCIF files","author":null,"project_urls":{"Homepage":"https://github.com/y1zhou/arpeggia","Issues":"https://github.com/y1zhou/arpeggia/issues","Repository":"https://github.com/y1zhou/arpeggia"},"requires_python":">=3.10","license":null,"classifiers":["License :: OSI Approved :: GNU General Public License v3 (GPLv3)","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Scientific/Engineering :: Bio-Informatics","Topic :: Scientific/Engineering :: Chemistry"],"wheels":[{"filename":"arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/db/7d/2fd7391722a4d86265af68e4c56acdd6956843c556b5d37e4fe27c313da3/arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"85708aed-113c-51a0-ba22-08a0cf215095","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/85708aed-113c-51a0-ba22-08a0cf215095/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/01/a1/13563f4c0827cbe822ec7416f5ac45884de55643573cb56d561710275974/arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"4477e600-6cfe-5fb1-a9c1-e0e233d59906","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4477e600-6cfe-5fb1-a9c1-e0e233d59906/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/e9/ab/8f802e270a240f54c02b343decee375dd36ed28d2b95e062b484dcfaed18/arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"6a44b8f5-5488-5f4d-b6fa-abcb37b732d8","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6a44b8f5-5488-5f4d-b6fa-abcb37b732d8/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/4a/2b/eb87dd76242009a70df7b2ac1859cf4acba9f4b1d0bbdc08fb7fcf1815ba/arpeggia-0.10.2-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"f8f70e17-9afc-5d2b-a9bc-9b69e5ce3384","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f8f70e17-9afc-5d2b-a9bc-9b69e5ce3384/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/ee/cc/b9af9b95c45df8712cc5a97aa1d3ace0e4478a344d722e5235dda580f714/arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"e3fc7ab9-8aff-59b6-9c5f-655a081f858a","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e3fc7ab9-8aff-59b6-9c5f-655a081f858a/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/e5/87/0c14acd8428bec5ce0aaa46e07346ecd425c4fb00fa6ed08b61a2f55d51a/arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"0b317d84-71d7-51a1-b3af-2bb65c228f32","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0b317d84-71d7-51a1-b3af-2bb65c228f32/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/05/80/f3d5e451bc145cf3918e03495db4f5792c94642edc1f1b4281418bcf5679/arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"ce791f10-6773-5a42-95ef-fecff8c6ae65","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ce791f10-6773-5a42-95ef-fecff8c6ae65/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/fd/3e/393a1656720b56724cc9edb7373a5f032e16ae7fe4c697275b321c1e6756/arpeggia-0.10.2-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"cb2da1b8-fef9-5310-8901-212a3bddbf0a","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cb2da1b8-fef9-5310-8901-212a3bddbf0a/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/37/c6/707662a7b345dce865a1ac7ded0a08e4b0f6f6ced29c33dde9d7e93dc31b/arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"69585726-6a47-5c8b-905f-0fa354bda687","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/69585726-6a47-5c8b-905f-0fa354bda687/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/99/4c/c9ce59700ae54d39f7169c34e73785973b1b07a12c354545cc49f76c602b/arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"98e018b2-8d04-51b8-8c17-3394bc9fb23c","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/98e018b2-8d04-51b8-8c17-3394bc9fb23c/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/04/27/92f1d2a9167c41d2f90b18a9a450c4ef33a087f2aa17819d9c40a24705bc/arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"07e3dd0d-2471-5eca-91ad-4d035fdfcb7e","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/07e3dd0d-2471-5eca-91ad-4d035fdfcb7e/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/50/66/751125bafa02d37c1f28750592cdd6a072f072dd75c68597fd7cef7fc04d/arpeggia-0.10.2-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"1bf9b6e8-04f7-58ee-911b-59f87fb7049f","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1bf9b6e8-04f7-58ee-911b-59f87fb7049f/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/9d/0e/309a329dd1d14cd40f29250725e56007b879d928646e3dba110f240f2fa9/arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"345fdd05-23a7-5e53-8568-db5edda29eb3","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/345fdd05-23a7-5e53-8568-db5edda29eb3/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/8f/59/8d34d6318911e384e68cbb1f87832587c10a7b00ab687ae73427185b5ef9/arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"1ced3c32-910b-591b-81ea-b3c8c7530448","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1ced3c32-910b-591b-81ea-b3c8c7530448/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/59/43/0bf2cba91ff87f5731250cd59a07ba56963a0a00302fcefb867cdec431b5/arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"a0cfc022-6530-5ab4-9f0b-af265982bb72","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a0cfc022-6530-5ab4-9f0b-af265982bb72/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/71/23/7d8082fe779a159ca6f2ea235e7e92772d8b90ea6da3a6ff737807551eee/arpeggia-0.10.2-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"b19505f8-a0bd-5a5b-93ca-268d0c690011","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b19505f8-a0bd-5a5b-93ca-268d0c690011/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/a6/ce/ff1db5dcf5bb50daf8d03f78315b1530314551bdddeaa3816b6d23809cf9/arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"bdb2cfbf-7288-5e31-bcae-579a3af79305","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bdb2cfbf-7288-5e31-bcae-579a3af79305/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/ac/80/090f6029f6f29062862d9480a3c6e960c564fdc20d9222dce2bddb96105f/arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"9699feaf-6fdc-58ea-aec8-5ae8871768e7","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9699feaf-6fdc-58ea-aec8-5ae8871768e7/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/82/fe/bf12143853428392be1f94b6328299fedbd4e6ca5f1d6d592653acde1ee2/arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"1832a8da-63a6-5c80-954a-63cc228efe66","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1832a8da-63a6-5c80-954a-63cc228efe66/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"arpeggia-0.10.2-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/bb/1b/8eb01ab25debe28bbcf6cf60c1ef5ac1831ca4476943136684981d2be34b/arpeggia-0.10.2-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"1dc345b4-4e98-59f4-bcf6-cb836b0f698b","path":"arpeggia-0.10.2.dist-info/sboms/arpeggia.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1dc345b4-4e98-59f4-bcf6-cb836b0f698b/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":20,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"GHSA-6g2r-675j-hx59","aliases":[],"summary":"xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release","severity":"low","score":2.3,"package":"xxhash-rust","version":"0.8.15","ecosystem":"crates.io","purl":"pkg:cargo/xxhash-rust@0.8.15","fixed":["0.8.16"],"url":"https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["arpeggia-0.10.2-cp310-cp310-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp310-cp310-win_amd64.whl","arpeggia-0.10.2-cp311-cp311-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp311-cp311-win_amd64.whl","arpeggia-0.10.2-cp312-cp312-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp312-cp312-win_amd64.whl","arpeggia-0.10.2-cp313-cp313-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp313-cp313-win_amd64.whl","arpeggia-0.10.2-cp314-cp314-macosx_11_0_arm64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","arpeggia-0.10.2-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","arpeggia-0.10.2-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":20,"total_sboms":20,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":4,"medium":2,"low":3,"unknown":21}}}