{"url":"https://pypi.sbomify.com/package/chiz/0.9.9","markdown_url":"https://pypi.sbomify.com/package/chiz/0.9.9.md","name":"chiz","version":"0.9.9","purl":"pkg:pypi/chiz@0.9.9","summary":"Chili Pepper Language Linter, Formatter, and Language Server, written in Rust.","author":null,"project_urls":{},"requires_python":">=3.7","license":null,"classifiers":["Development Status :: 5 - Production/Stable","Environment :: Console","Intended Audience :: Developers","Operating System :: OS Independent","Programming Language :: Python","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Programming Language :: Rust"],"wheels":[{"filename":"chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/9c/bc/ca070876c150250e780799ab71b927ffb37cbfa5fd10fe86e84e7d90c528/chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"c4db320e-f235-5b94-a0f8-e4c926c4a5c1","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c4db320e-f235-5b94-a0f8-e4c926c4a5c1/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/59/c3/b642d03c1a65b8586a9cb83536d9c54f80e33c8363027914d154d1f5d337/chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"151bebbe-47b5-54cb-b3e1-339ee21a73e2","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/151bebbe-47b5-54cb-b3e1-339ee21a73e2/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/6a/7b/20d8901b1be41f581d431db5df67c1b098ee652a1196b2ecaabc25badc50/chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"648b03bf-645c-595a-a2fe-ebabc10b3f97","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/648b03bf-645c-595a-a2fe-ebabc10b3f97/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/e9/90/e3826efbbb8eb4b1ee8a1a7aa575adfd0ae52d100db06c71400f2e9796b6/chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"c4c7e982-4715-5f4c-99a7-f945f3464bc6","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c4c7e982-4715-5f4c-99a7-f945f3464bc6/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"chiz-0.9.9-py3-none-win32.whl","url":"https://files.pythonhosted.org/packages/f4/80/f7b5502eb2fb07e6067fc4c1a1b759833848231fd4c2fd0af9d87f92c900/chiz-0.9.9-py3-none-win32.whl","sboms":[{"artifact_uuid":"83345221-695f-5603-9bc9-98eedef27b8e","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/83345221-695f-5603-9bc9-98eedef27b8e/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"chiz-0.9.9-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/27/b6/17212f3b87541df572fd8b98b5eb6dae6ec747da6715f6b36b1d56b472fb/chiz-0.9.9-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"1a282ae6-14eb-5c07-bc6b-1ac535ed43eb","path":"chiz-0.9.9.dist-info/sboms/chiz.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1a282ae6-14eb-5c07-bc6b-1ac535ed43eb/download","vulnerability_count":12,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":6,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-qwgh-2vcv-g2f7","aliases":[],"summary":"block_buffer: panic corrupts inline buffer position","severity":"medium","score":6.3,"package":"block-buffer","version":"0.12.0","ecosystem":"crates.io","purl":"pkg:cargo/block-buffer@0.12.0","fixed":[],"url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.11.0","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.11.0","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"GHSA-3pv8-6f4r-ffg2","aliases":[],"summary":"tar has a PAX header desynchronization issue","severity":"unknown","score":null,"package":"tar","version":"0.4.45","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.45","fixed":["0.4.46"],"url":"https://osv.dev/vulnerability/GHSA-3pv8-6f4r-ffg2","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.48.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.48.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.7","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.7","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["chiz-0.9.9-py3-none-macosx_10_12_x86_64.whl","chiz-0.9.9-py3-none-macosx_11_0_arm64.whl","chiz-0.9.9-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","chiz-0.9.9-py3-none-musllinux_1_2_x86_64.whl","chiz-0.9.9-py3-none-win32.whl","chiz-0.9.9-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":6,"total_sboms":6,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":4,"low":2,"unknown":6}}}