{"url":"https://pypi.sbomify.com/package/ddx-python/1.1.11","markdown_url":"https://pypi.sbomify.com/package/ddx-python/1.1.11.md","name":"ddx-python","version":"1.1.11","purl":"pkg:pypi/ddx-python@1.1.11","summary":null,"author":null,"project_urls":{},"requires_python":">=3.14","license":null,"classifiers":["Development Status :: 4 - Beta","Intended Audience :: Developers","Operating System :: POSIX :: Linux","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust","Topic :: Office/Business :: Financial :: Investment","Topic :: Software Development :: Libraries :: Python Modules"],"wheels":[{"filename":"ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/97/aa/982385e152189e3be67de0743e148b72757eafb920d04e78dad066b4e196/ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"d0e9eea2-a350-5d1b-9e8d-6bfa89d7a8f5","path":"ddx_python-1.1.11.dist-info/sboms/ddx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d0e9eea2-a350-5d1b-9e8d-6bfa89d7a8f5/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":1,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0179","aliases":["GHSA-5x78-73v4-xg6w"],"summary":"Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service","severity":"high","score":8.7,"package":"postgres-protocol","version":"0.6.10","ecosystem":"crates.io","purl":"pkg:cargo/postgres-protocol@0.6.10","fixed":["0.6.12"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0179","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0180","aliases":["GHSA-rgqc-3x5p-6gwg"],"summary":"Panic decoding a malformed `hstore` value allows denial of service","severity":"medium","score":6.9,"package":"postgres-protocol","version":"0.6.10","ecosystem":"crates.io","purl":"pkg:cargo/postgres-protocol@0.6.10","fixed":["0.6.12"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0180","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.46","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.46","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.11.0","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.11.0","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"GHSA-7gcf-g7xr-8hxj","aliases":[],"summary":"serde_with: KeyValueMap serialization panics on empty sequence or map entries","severity":"medium","score":5.1,"package":"serde_with","version":"3.16.1","ecosystem":"crates.io","purl":"pkg:cargo/serde_with@3.16.1","fixed":["3.21.0"],"url":"https://osv.dev/vulnerability/GHSA-7gcf-g7xr-8hxj","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0012","aliases":["GHSA-3288-p39f-rqpv"],"summary":"Unsoundness in opt-in ARMv8 assembly backend for `keccak`","severity":"low","score":0.5,"package":"keccak","version":"0.1.5","ecosystem":"crates.io","purl":"pkg:cargo/keccak@0.1.5","fixed":["0.1.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0012","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0388","aliases":[],"summary":"`derivative` is unmaintained; consider using an alternative","severity":"unknown","score":null,"package":"derivative","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/derivative@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0388","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0161","aliases":[],"summary":"libsecp256k1 is unmaintained","severity":"unknown","score":null,"package":"libsecp256k1","version":"0.7.2","ecosystem":"crates.io","purl":"pkg:cargo/libsecp256k1@0.7.2","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0161","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.3","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.3","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0173","aliases":[],"summary":"proc-macro-error2 is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error2","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error2@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0173","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.9.2","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.9.2","fixed":["0.9.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.7.46","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.46","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0220","aliases":[],"summary":"Uint shift operations: incorrect overflow flags and truncated shift amounts","severity":"unknown","score":null,"package":"ruint","version":"1.17.2","ecosystem":"crates.io","purl":"pkg:cargo/ruint@1.17.2","fixed":["1.20.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0220","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.49.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.49.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0081","aliases":[],"summary":"`unic-char-property` is unmaintained","severity":"unknown","score":null,"package":"unic-char-property","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-char-property@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0081","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0075","aliases":[],"summary":"`unic-char-range` is unmaintained","severity":"unknown","score":null,"package":"unic-char-range","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-char-range@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0075","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0080","aliases":[],"summary":"`unic-common` is unmaintained","severity":"unknown","score":null,"package":"unic-common","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-common@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0080","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0090","aliases":[],"summary":"`unic-emoji-char` is unmaintained","severity":"unknown","score":null,"package":"unic-emoji-char","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-emoji-char@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0090","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0100","aliases":[],"summary":"`unic-ucd-ident` is unmaintained","severity":"unknown","score":null,"package":"unic-ucd-ident","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-ucd-ident@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0100","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0098","aliases":[],"summary":"`unic-ucd-version` is unmaintained","severity":"unknown","score":null,"package":"unic-ucd-version","version":"0.9.0","ecosystem":"crates.io","purl":"pkg:cargo/unic-ucd-version@0.9.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0098","wheels":["ddx_python-1.1.11-cp314-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":1,"total_sboms":1,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":5,"low":1,"unknown":19}}}