{"url":"https://pypi.sbomify.com/package/dora-rs/1.1.0","markdown_url":"https://pypi.sbomify.com/package/dora-rs/1.1.0.md","name":"dora-rs","version":"1.1.0","purl":"pkg:pypi/dora-rs@1.1.0","summary":null,"author":null,"project_urls":{},"requires_python":">=3.11","license":"MIT","classifiers":[],"wheels":[{"filename":"dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/0c/d6/4e86287fdcb4a0b733800f3e744be7cf91ba51aa0daf6bc440f995575a8d/dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"1c7f6b02-7ac3-5992-aefc-155139a9d13b","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1c7f6b02-7ac3-5992-aefc-155139a9d13b/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/fc/e9/6ca64911ba0538a9b3cebee46d53f68146059953edb22855152c00a01901/dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"90315cdc-8b47-5ab4-81da-2929b480dded","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/90315cdc-8b47-5ab4-81da-2929b480dded/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","url":"https://files.pythonhosted.org/packages/b1/06/f146f1d7da5b758dc1efb62865d9a128aff9286ffa57f86eba18d2e305cc/dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","sboms":[{"artifact_uuid":"200d5830-5bd9-59cb-99bf-af25f2e13ad8","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/200d5830-5bd9-59cb-99bf-af25f2e13ad8/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","url":"https://files.pythonhosted.org/packages/db/21/561bd1934e050de5826d066e25b001ba7a442aae24601bea11c76d700c38/dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","sboms":[{"artifact_uuid":"a0024f76-27d7-5537-8a46-fcdfbf1fd6a2","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a0024f76-27d7-5537-8a46-fcdfbf1fd6a2/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/93/03/f7a654b610239b71be70cf29653d56eafa703b6b5e13712095f8ad7da4b7/dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"692c7193-03cf-514e-b6f9-80c4fe58b244","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/692c7193-03cf-514e-b6f9-80c4fe58b244/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/4b/3e/af64db3e0b91d4e0e6ebde15c17fe54824e2dee99d325769ac41c47b43ea/dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"e345b673-dc46-55d9-894e-e42881413215","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e345b673-dc46-55d9-894e-e42881413215/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","url":"https://files.pythonhosted.org/packages/90/40/132b2f4dc900c83e082dbd351d2931dc543e9f9dd84884512adb39e19c6e/dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","sboms":[{"artifact_uuid":"8981a880-9b03-5db5-9866-d24f58978ab7","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8981a880-9b03-5db5-9866-d24f58978ab7/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/0c/62/275080483a9724bdd8f091222232cb6024600a315db4f553289ef55f27f3/dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"5c2a2b66-4d0b-5988-b932-a5013ac2de96","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5c2a2b66-4d0b-5988-b932-a5013ac2de96/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/0f/f9/c64b3e5b732bc386e35a8ced791ca95f83d8c0c0ac1feec885b3dd17c07b/dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"3ed0eded-7195-5522-a1ee-251ff6d2a1ff","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3ed0eded-7195-5522-a1ee-251ff6d2a1ff/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"dora_rs-1.1.0-cp311-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/40/d6/b4bdbe95fbb0f0781e1ed2a9da5532aad0998ade1abc11e97914157f0472/dora_rs-1.1.0-cp311-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"ba755ac8-5b08-5bd6-8e98-e5081091a09c","path":"dora_rs-1.1.0.dist-info/sboms/dora-node-api-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ba755ac8-5b08-5bd6-8e98-e5081091a09c/download","vulnerability_count":29,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":10,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-32829","aliases":["GHSA-vvp9-7p8x-rfvv","RUSTSEC-2026-0041"],"summary":"Decompressing invalid data can leak information from uninitialized memory or reused output buffer","severity":"high","score":8.2,"package":"lz4_flex","version":"0.10.0","ecosystem":"crates.io","purl":"pkg:cargo/lz4_flex@0.10.0","fixed":["0.11.6"],"url":"https://insights.sbomify.com/CVE-2026-32829/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"59.3.0","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@59.3.0","fixed":["59.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.29","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.29","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0284","aliases":[],"summary":"Double free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`","severity":"unknown","score":null,"package":"lockfree","version":"0.5.1","ecosystem":"crates.io","purl":"pkg:cargo/lockfree@0.5.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0284","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.4","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.4","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2020-0016","aliases":[],"summary":"`net2` crate has been deprecated; use `socket2` instead","severity":"unknown","score":null,"package":"net2","version":"0.2.39","ecosystem":"crates.io","purl":"pkg:cargo/net2@0.2.39","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2020-0016","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0291","aliases":[],"summary":"Double free in `OwnedAlloc::drop_in_place` when the contained value's `Drop` panics","severity":"unknown","score":null,"package":"owned-alloc","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/owned-alloc@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0291","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0299","aliases":[],"summary":"`owned-alloc` is unmaintained","severity":"unknown","score":null,"package":"owned-alloc","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/owned-alloc@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0299","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"6.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@6.0.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["dora_rs-1.1.0-cp311-abi3-macosx_11_0_arm64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_aarch64.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_armv7l.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_i686.whl","dora_rs-1.1.0-cp311-abi3-manylinux_2_28_x86_64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_aarch64.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_armv7l.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_i686.whl","dora_rs-1.1.0-cp311-abi3-musllinux_1_2_x86_64.whl","dora_rs-1.1.0-cp311-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":10,"total_sboms":10,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":6,"medium":2,"low":3,"unknown":16}}}