{"url":"https://pypi.sbomify.com/package/dora-rs-cli/1.1.0","markdown_url":"https://pypi.sbomify.com/package/dora-rs-cli/1.1.0.md","name":"dora-rs-cli","version":"1.1.0","purl":"pkg:pypi/dora-rs-cli@1.1.0","summary":null,"author":null,"project_urls":{},"requires_python":">=3.11","license":"MIT","classifiers":[],"wheels":[{"filename":"dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/f0/7a/5da05ac1efc200338d7a246bfac88ae67a1dc4c6b8aee21c400de1923198/dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"5ddbfdb4-3f70-570d-bae5-7180b0c2800d","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5ddbfdb4-3f70-570d-bae5-7180b0c2800d/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/c1/79/d1c8aee22ab96fc12b83ff009b0846dce3d736fedd5d689b4a4d54e81f93/dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"ec31b316-b054-5fd7-a23e-89f2936a6cee","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ec31b316-b054-5fd7-a23e-89f2936a6cee/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","url":"https://files.pythonhosted.org/packages/ef/52/002ee01b41c0f69d4fe4bfaa82681b60d95f945ab3b75c0153722000061c/dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","sboms":[{"artifact_uuid":"5989cd89-89ea-542b-880b-d3278bb06fb5","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5989cd89-89ea-542b-880b-d3278bb06fb5/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","url":"https://files.pythonhosted.org/packages/a1/4d/f568c9695ec7a0de4b44bc4c681cb104c18e537343f40ebc54779f008046/dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","sboms":[{"artifact_uuid":"85db7ef7-67fa-5693-a2d2-fc89d8128834","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/85db7ef7-67fa-5693-a2d2-fc89d8128834/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/3b/e9/521b19e3c6dd41b233afd7fccd95eb9e9b3c3b51bae5c75141f0a98c68c4/dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"a75c25cf-3585-5669-bd76-b4b0bfe80425","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a75c25cf-3585-5669-bd76-b4b0bfe80425/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/6c/f3/53c11d540c20862974a05fc1842f791e174e3d673a7c23d407ad87ae4a9d/dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"e18c0fe2-3701-5092-af78-bbe5640dcb9a","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e18c0fe2-3701-5092-af78-bbe5640dcb9a/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","url":"https://files.pythonhosted.org/packages/ce/a0/ef3e17bacdbcbb40c6133e7c46aeb2b48a53c8a9c9bfb440eecf2b3fe7d0/dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","sboms":[{"artifact_uuid":"90bd757f-2fd5-5118-80d4-b0198fb28c63","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/90bd757f-2fd5-5118-80d4-b0198fb28c63/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/c7/df/1e6a2d69765818a65107d6f5f03954e85579bb5982cfe60be9ea0ea3cac1/dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"d36994a3-f9e6-5e30-9b6c-0542da6bb853","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d36994a3-f9e6-5e30-9b6c-0542da6bb853/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/54/b0/cdce2d03c250abefb41050f7d83fd2c0c7e9e57effa75948683918aa0cf1/dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"c10ce78d-255b-5878-be84-15759c1e19da","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c10ce78d-255b-5878-be84-15759c1e19da/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/de/e1/f8bac2142ff4f3260a081a2dcd7ff5346f5a3d2507324a17acecf81b8e34/dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"26994959-ef12-5384-b1c1-74ff5d6d34c9","path":"dora_rs_cli-1.1.0.dist-info/sboms/dora-cli-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/26994959-ef12-5384-b1c1-74ff5d6d34c9/download","vulnerability_count":27,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":10,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-32829","aliases":["GHSA-vvp9-7p8x-rfvv","RUSTSEC-2026-0041"],"summary":"Decompressing invalid data can leak information from uninitialized memory or reused output buffer","severity":"high","score":8.2,"package":"lz4_flex","version":"0.10.0","ecosystem":"crates.io","purl":"pkg:cargo/lz4_flex@0.10.0","fixed":["0.11.6"],"url":"https://insights.sbomify.com/CVE-2026-32829/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"59.3.0","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@59.3.0","fixed":["59.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.29","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.29","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0284","aliases":[],"summary":"Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`","severity":"unknown","score":null,"package":"lockfree","version":"0.5.1","ecosystem":"crates.io","purl":"pkg:cargo/lockfree@0.5.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0284","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.4","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.4","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0291","aliases":[],"summary":"Double free in `OwnedAlloc::drop_in_place` when the contained value's `Drop` panics","severity":"unknown","score":null,"package":"owned-alloc","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/owned-alloc@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0291","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0299","aliases":[],"summary":"`owned-alloc` is unmaintained","severity":"unknown","score":null,"package":"owned-alloc","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/owned-alloc@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0299","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["dora_rs_cli-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs_cli-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs_cli-1.1.0-cp311-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":10,"total_sboms":10,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":6,"medium":2,"low":3,"unknown":14}}}