{"url":"https://pypi.sbomify.com/package/edgefirst-client/2.20.0","markdown_url":"https://pypi.sbomify.com/package/edgefirst-client/2.20.0.md","name":"edgefirst-client","version":"2.20.0","purl":"pkg:pypi/edgefirst-client@2.20.0","summary":null,"author":null,"project_urls":{"Documentation":"https://doc.edgefirst.ai","Homepage":"https://edgefirst.studio"},"requires_python":">=3.8","license":null,"classifiers":[],"wheels":[{"filename":"edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/48/81/286526f9a9416896fb3a654e1555d277143637ae8aec047a5a8769837657/edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"b3a0b929-a7a4-5891-8a2e-b1ebaa37535e","path":"edgefirst_client-2.20.0.dist-info/sboms/edgefirst-client-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b3a0b929-a7a4-5891-8a2e-b1ebaa37535e/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"EdgeFirstAI/client","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.10":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/EdgeFirstAI/client","1.3.6.1.4.1.57264.1.13":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.15":"1076321816","1.3.6.1.4.1.57264.1.16":"https://github.com/EdgeFirstAI","1.3.6.1.4.1.57264.1.17":"161091674","1.3.6.1.4.1.57264.1.18":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.19":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/EdgeFirstAI/client/actions/runs/40538654902/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/65/c8/7362c717237f094d7ea8bc1b6a496c54e43b87770964a8806e20fbee5650/edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"b9e5ae12-0f52-50e9-aea7-7c5ad32b6c8b","path":"edgefirst_client-2.20.0.dist-info/sboms/edgefirst-client-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b9e5ae12-0f52-50e9-aea7-7c5ad32b6c8b/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"EdgeFirstAI/client","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.10":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/EdgeFirstAI/client","1.3.6.1.4.1.57264.1.13":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.15":"1076321816","1.3.6.1.4.1.57264.1.16":"https://github.com/EdgeFirstAI","1.3.6.1.4.1.57264.1.17":"161091674","1.3.6.1.4.1.57264.1.18":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.19":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/EdgeFirstAI/client/actions/runs/40538654902/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/ec/2a/52a688f5b492828012b668bd3c65ba0db7c10490cdf6ed8b57be99f97a01/edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"a623886e-89b9-5efc-b611-2076b69a1c31","path":"edgefirst_client-2.20.0.dist-info/sboms/edgefirst-client-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a623886e-89b9-5efc-b611-2076b69a1c31/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"EdgeFirstAI/client","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.10":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/EdgeFirstAI/client","1.3.6.1.4.1.57264.1.13":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.15":"1076321816","1.3.6.1.4.1.57264.1.16":"https://github.com/EdgeFirstAI","1.3.6.1.4.1.57264.1.17":"161091674","1.3.6.1.4.1.57264.1.18":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.19":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/EdgeFirstAI/client/actions/runs/40538654902/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/1a/2c/cfd0313a13ac7b2d47898b42a70ed8c07471607b92b6062c5ee012ac1e2b/edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"92be640d-5c2a-5f3e-8044-625d3b04e714","path":"edgefirst_client-2.20.0.dist-info/sboms/edgefirst-client-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/92be640d-5c2a-5f3e-8044-625d3b04e714/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"EdgeFirstAI/client","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.10":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/EdgeFirstAI/client","1.3.6.1.4.1.57264.1.13":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.15":"1076321816","1.3.6.1.4.1.57264.1.16":"https://github.com/EdgeFirstAI","1.3.6.1.4.1.57264.1.17":"161091674","1.3.6.1.4.1.57264.1.18":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.19":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/EdgeFirstAI/client/actions/runs/40538654902/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f0/ca/0c955e7198acfdddf04be77a66f9d25dc6312430f85b9dc3d22c7e0ce9b8/edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"02ca282c-0b2c-5eb2-942f-b8c6e8f12766","path":"edgefirst_client-2.20.0.dist-info/sboms/edgefirst-client-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/02ca282c-0b2c-5eb2-942f-b8c6e8f12766/download","vulnerability_count":16,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"EdgeFirstAI/client","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.10":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/EdgeFirstAI/client","1.3.6.1.4.1.57264.1.13":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.14":"refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.15":"1076321816","1.3.6.1.4.1.57264.1.16":"https://github.com/EdgeFirstAI","1.3.6.1.4.1.57264.1.17":"161091674","1.3.6.1.4.1.57264.1.18":"https://github.com/EdgeFirstAI/client/.github/workflows/publish.yml@refs/tags/v2.20.0","1.3.6.1.4.1.57264.1.19":"65527d0540e385aa270e79e36b8ae0a7bbc6d745","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/EdgeFirstAI/client/actions/runs/40538654902/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["edgefirst_client-2.20.0-cp38-abi3-macosx_10_12_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-macosx_11_0_arm64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","edgefirst_client-2.20.0-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","edgefirst_client-2.20.0-cp38-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"unknown":14}}}