{"url":"https://pypi.sbomify.com/package/cargo-xwin/0.23.1","markdown_url":"https://pypi.sbomify.com/package/cargo-xwin/0.23.1.md","name":"cargo-xwin","version":"0.23.1","purl":"pkg:pypi/cargo-xwin@0.23.1","summary":null,"author":null,"project_urls":{},"requires_python":null,"license":null,"classifiers":[],"wheels":[{"filename":"cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/11/4c/acf34ad8e67b44c84a01a119b4a2310be1fb4f3541f35e50b275096deeb6/cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"41ed928c-5639-5c29-bb64-6a102e1f63dd","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/41ed928c-5639-5c29-bb64-6a102e1f63dd/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/df/f3/84db75542b732bca2d56ad28f7fe5cd3170510ace405becccae8442de965/cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"c84f0ab5-cc67-5340-a492-d3009b66cd3b","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c84f0ab5-cc67-5340-a492-d3009b66cd3b/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","url":"https://files.pythonhosted.org/packages/ae/06/af364de4013e9d96b7ef129f388dd1f0113fcf2ad70a955a33b55fd1587a/cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","sboms":[{"artifact_uuid":"171ad331-abb1-5952-a002-3d62249fd9d2","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/171ad331-abb1-5952-a002-3d62249fd9d2/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","url":"https://files.pythonhosted.org/packages/4d/5d/19b02db95d4192f290a23ca7c80dca75ba5f5f7aef7e8b148af02272e0d0/cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","sboms":[{"artifact_uuid":"70785586-edb5-573e-903b-5b14d9726009","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/70785586-edb5-573e-903b-5b14d9726009/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","url":"https://files.pythonhosted.org/packages/16/ed/4114970accb1a6790913d6c59a1ccc53ccda3727023836a0a1aa1be98bd2/cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","sboms":[{"artifact_uuid":"876aa39d-c259-5ac2-9b5b-60d9e70f5c34","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/876aa39d-c259-5ac2-9b5b-60d9e70f5c34/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-win32.whl","url":"https://files.pythonhosted.org/packages/2c/34/ca10243381fe2a4e0d93a6c73f128c9fe314e44220227a160cc12a580293/cargo_xwin-0.23.1-py3-none-win32.whl","sboms":[{"artifact_uuid":"db5966ee-1e6e-5043-8da9-3e8a1075c86d","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/db5966ee-1e6e-5043-8da9-3e8a1075c86d/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"cargo_xwin-0.23.1-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f0/10/a0b26c45dcdcf2f273a715b60be5f3120e12b36ef554deeba9df4fe07191/cargo_xwin-0.23.1-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"71951918-0465-58a8-bbdd-6d8534dc6f16","path":"cargo_xwin-0.23.1.dist-info/sboms/cargo-xwin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/71951918-0465-58a8-bbdd-6d8534dc6f16/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115908","aliases":["GHSA-hjqx-j4rw-g7xv"],"summary":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. ","severity":"high","score":7.4,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115908/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.14","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.14","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["cargo_xwin-0.23.1-py3-none-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_i686.manylinux1_i686.whl","cargo_xwin-0.23.1-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","cargo_xwin-0.23.1-py3-none-win32.whl","cargo_xwin-0.23.1-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":4,"medium":3,"low":2,"unknown":4}}}