{"url":"https://pypi.sbomify.com/package/browse-now/2.10.0","markdown_url":"https://pypi.sbomify.com/package/browse-now/2.10.0.md","name":"browse-now","version":"2.10.0","purl":"pkg:pypi/browse-now@2.10.0","summary":"Browser automation CLI for AI agents - reliable element targeting through accessibility tree refs","author":null,"project_urls":{"Bug Tracker":"https://github.com/nowledge-co/nowledge-mem/issues","Chrome Extension":"https://chromewebstore.google.com/detail/nowledge-memory-exchange/kjgpkgodplgakbeanoifnlpkphemcbmh","Documentation":"https://mem.nowledge.co/docs/","Homepage":"https://mem.nowledge.co"},"requires_python":">=3.8","license":"Proprietary","classifiers":["Development Status :: 4 - Beta","Environment :: Console","Intended Audience :: Developers","License :: Other/Proprietary License","Operating System :: OS Independent","Programming Language :: Rust","Topic :: Internet :: WWW/HTTP :: Browsers","Topic :: Scientific/Engineering :: Artificial Intelligence"],"wheels":[{"filename":"browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/fd/d5/0fe498d86cc6634a426c3d7b9d3ab33e73599ef31c9f9edea824214c9881/browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"3db61da6-7858-5f21-8d36-b22e1c0e7181","path":"browse_now-2.10.0.dist-info/sboms/nmem-browse.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3db61da6-7858-5f21-8d36-b22e1c0e7181/download","vulnerability_count":28,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nowledge-co/mem","workflow":"release-pypi-clis.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.10":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nowledge-co/mem","1.3.6.1.4.1.57264.1.13":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.14":"refs/heads/rust_Port","1.3.6.1.4.1.57264.1.15":"1014672543","1.3.6.1.4.1.57264.1.16":"https://github.com/nowledge-co","1.3.6.1.4.1.57264.1.17":"210230799","1.3.6.1.4.1.57264.1.18":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.19":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/nowledge-co/mem/actions/runs/28366730346/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/f7/ae/d12fb0d20859032ee6de170f481b7a249c843344444b53b6c5883ac3cc68/browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"f84af9a6-7bc7-5dfe-89e4-01a0863c6ccd","path":"browse_now-2.10.0.dist-info/sboms/nmem-browse.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f84af9a6-7bc7-5dfe-89e4-01a0863c6ccd/download","vulnerability_count":28,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nowledge-co/mem","workflow":"release-pypi-clis.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.10":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nowledge-co/mem","1.3.6.1.4.1.57264.1.13":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.14":"refs/heads/rust_Port","1.3.6.1.4.1.57264.1.15":"1014672543","1.3.6.1.4.1.57264.1.16":"https://github.com/nowledge-co","1.3.6.1.4.1.57264.1.17":"210230799","1.3.6.1.4.1.57264.1.18":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.19":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/nowledge-co/mem/actions/runs/28366730346/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/4d/ca/f42dfafff5486a60247de73b26237811cb45a28b31431e96a12d2d32c041/browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"c8156f05-8ef0-5bb6-bc72-6900c4d8e655","path":"browse_now-2.10.0.dist-info/sboms/nmem-browse.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c8156f05-8ef0-5bb6-bc72-6900c4d8e655/download","vulnerability_count":28,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nowledge-co/mem","workflow":"release-pypi-clis.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/tags/cli-publish-v0.10.26","1.3.6.1.4.1.57264.1.10":"49da8d0032a893392a9b14dbcbea4402cf36347d","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nowledge-co/mem","1.3.6.1.4.1.57264.1.13":"49da8d0032a893392a9b14dbcbea4402cf36347d","1.3.6.1.4.1.57264.1.14":"refs/tags/cli-publish-v0.10.26","1.3.6.1.4.1.57264.1.15":"1014672543","1.3.6.1.4.1.57264.1.16":"https://github.com/nowledge-co","1.3.6.1.4.1.57264.1.17":"210230799","1.3.6.1.4.1.57264.1.18":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/tags/cli-publish-v0.10.26","1.3.6.1.4.1.57264.1.19":"49da8d0032a893392a9b14dbcbea4402cf36347d","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/nowledge-co/mem/actions/runs/29205375720/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/35/a1/b12437e2fdfd599222a7c09a931fc6e0d884f2809400f6d34f155457bb58/browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"e4ee7ffe-054c-5b94-b519-00ba56e692b8","path":"browse_now-2.10.0.dist-info/sboms/nmem-browse.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e4ee7ffe-054c-5b94-b519-00ba56e692b8/download","vulnerability_count":28,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nowledge-co/mem","workflow":"release-pypi-clis.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.10":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nowledge-co/mem","1.3.6.1.4.1.57264.1.13":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.14":"refs/heads/rust_Port","1.3.6.1.4.1.57264.1.15":"1014672543","1.3.6.1.4.1.57264.1.16":"https://github.com/nowledge-co","1.3.6.1.4.1.57264.1.17":"210230799","1.3.6.1.4.1.57264.1.18":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.19":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/nowledge-co/mem/actions/runs/28366730346/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"browse_now-2.10.0-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/af/96/b265cc49540160727e8291b1a53fca114c340f1a4f6eab0b1b18f11fe88b/browse_now-2.10.0-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"ea6297e4-550f-51bf-af79-79a18db32c7e","path":"browse_now-2.10.0.dist-info/sboms/nmem-browse.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ea6297e4-550f-51bf-af79-79a18db32c7e/download","vulnerability_count":28,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"nowledge-co/mem","workflow":"release-pypi-clis.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.10":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/nowledge-co/mem","1.3.6.1.4.1.57264.1.13":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.14":"refs/heads/rust_Port","1.3.6.1.4.1.57264.1.15":"1014672543","1.3.6.1.4.1.57264.1.16":"https://github.com/nowledge-co","1.3.6.1.4.1.57264.1.17":"210230799","1.3.6.1.4.1.57264.1.18":"https://github.com/nowledge-co/mem/.github/workflows/release-pypi-clis.yml@refs/heads/rust_Port","1.3.6.1.4.1.57264.1.19":"6345fd4dcec19acff8e9a518c451778da79735a9","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/nowledge-co/mem/actions/runs/28366730346/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-25800","aliases":["GHSA-4w2j-m93h-cj5j","RUSTSEC-2026-0185"],"summary":" Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.15"],"url":"https://insights.sbomify.com/CVE-2026-25800/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.14","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.14","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.7","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.7","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["browse_now-2.10.0-py3-none-macosx_10_12_x86_64.whl","browse_now-2.10.0-py3-none-macosx_11_0_arm64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","browse_now-2.10.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","browse_now-2.10.0-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":2,"low":2,"unknown":22}}}