{"url":"https://pypi.sbomify.com/package/bustapi/0.15.0","markdown_url":"https://pypi.sbomify.com/package/bustapi/0.15.0.md","name":"bustapi","version":"0.15.0","purl":"pkg:pypi/bustapi@0.15.0","summary":"High-performance Python web framework with Rust backend","author":null,"project_urls":{"Documentation":"https://RUSTxPY.github.io/BustAPI/","Homepage":"https://github.com/RUSTxPY/BustAPI","Issues":"https://github.com/RUSTxPY/BustAPI/issues","Repository":"https://github.com/RUSTxPY/BustAPI.git"},"requires_python":">=3.10","license":"MIT","classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Rust","Topic :: Internet :: WWW/HTTP","Topic :: Software Development :: Libraries :: Application Frameworks"],"wheels":[{"filename":"bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/a2/6a/9cf9ebfedafc12bbb88acaaea09751d599167a05b789b3d4c3a9f4cc1731/bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"95fc81c6-b93d-56cc-8b90-004179d7a53c","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/95fc81c6-b93d-56cc-8b90-004179d7a53c/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/4f/44/e03d0280426d40c9201094da7aec4d8c9bf9956ee1ed11ca70cdcb7426b5/bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"61d8c5e7-2569-5510-9893-b71be14c1d6e","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/61d8c5e7-2569-5510-9893-b71be14c1d6e/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/72/d7/7d2f01455c2c2d964f0cf67ec834ad799a1de6dc3480d95e388e4046e3c2/bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"a4de17c8-037b-5bcd-b039-8169dcbab033","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a4de17c8-037b-5bcd-b039-8169dcbab033/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/6d/ef/ca4d1b57950a0ebef4e74568db755c9e8364e10f7b3414bdd6a58f8e742d/bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"73892a7c-5363-5eba-b414-4f0970867526","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/73892a7c-5363-5eba-b414-4f0970867526/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/b5/0d/b2625066561f7ec6dc2af2432d85b131f41e47767c6162694a3b2aea6f59/bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"5a331d44-c021-5354-9047-06e2de5c8afb","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5a331d44-c021-5354-9047-06e2de5c8afb/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/b9/e2/2af82052797ee5cd9e7483e22b1c5d5d4a51ce28018dd56c68b84fc2426b/bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"1ee22f44-065e-56db-b498-6b414485e79f","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1ee22f44-065e-56db-b498-6b414485e79f/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"bustapi-0.15.0-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/69/44/46a51cf0752eda7c6cb9a275d9953c37fe787886ebe1de405a6e43092aa3/bustapi-0.15.0-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"84ee8b34-8d8f-5938-b267-01f4ed1e36f3","path":"bustapi-0.15.0.dist-info/sboms/bustapi_core.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/84ee8b34-8d8f-5938-b267-01f4ed1e36f3/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0443","aliases":["GHSA-8hcm-m7r7-frwc"],"summary":"Hidden file disclosure through Windows short names","severity":"unknown","score":null,"package":"actix-files","version":"0.6.10","ecosystem":"crates.io","purl":"pkg:cargo/actix-files@0.6.10","fixed":["0.7.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0443","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0446","aliases":["GHSA-2q7f-mf9f-5qhr"],"summary":"Request smuggling through malformed chunked request trailers","severity":"unknown","score":null,"package":"actix-http","version":"3.13.6","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.13.6","fixed":["3.20.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0446","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0448","aliases":["GHSA-qph8-7859-gq2f","RUSTSEC-2026-0447"],"summary":"Unbounded decompression can exhaust memory and CPU resources","severity":"unknown","score":null,"package":"actix-http","version":"3.13.6","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.13.6","fixed":["3.20.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0448","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0455","aliases":["GHSA-7p9w-p5qm-5gc5"],"summary":"Large-window Brotli bodies bypass decompression memory limits","severity":"unknown","score":null,"package":"actix-http","version":"3.13.6","ecosystem":"crates.io","purl":"pkg:cargo/actix-http@3.13.6","fixed":["3.20.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0455","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0447","aliases":["GHSA-qph8-7859-gq2f","RUSTSEC-2026-0448"],"summary":"Compressed request bodies can exhaust memory before extractor limits apply","severity":"unknown","score":null,"package":"actix-web","version":"4.15.0","ecosystem":"crates.io","purl":"pkg:cargo/actix-web@4.15.0","fixed":["4.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0447","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.3.27","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.3.27","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.1.0+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.1.0%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["bustapi-0.15.0-cp310-abi3-macosx_10_12_x86_64.whl","bustapi-0.15.0-cp310-abi3-macosx_11_0_arm64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_aarch64.whl","bustapi-0.15.0-cp310-abi3-manylinux_2_28_x86_64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_aarch64.whl","bustapi-0.15.0-cp310-abi3-musllinux_1_2_x86_64.whl","bustapi-0.15.0-cp310-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":2,"low":3,"unknown":23}}}