{"url":"https://pypi.sbomify.com/package/embed-anything/0.7.1","markdown_url":"https://pypi.sbomify.com/package/embed-anything/0.7.1.md","name":"embed-anything","version":"0.7.1","purl":"pkg:pypi/embed-anything@0.7.1","summary":"Embed anything at lightning speed","author":null,"project_urls":{"Homepage":"https://github.com/StarlightSearch/EmbedAnything/tree/main"},"requires_python":">=3.10","license":null,"classifiers":["License :: OSI Approved :: MIT License","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14"],"wheels":[{"filename":"embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/4b/d8/f66cc081d0cd989dbff6b2e033a35d120c091f7b696dbf4a7bf07584a91d/embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"b5931ec8-0d08-5ae6-8e2f-f8523e0342a6","path":"embed_anything-0.7.1.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b5931ec8-0d08-5ae6-8e2f-f8523e0342a6/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"6a727f79-a54c-51b2-a138-cc7750f9d539","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6a727f79-a54c-51b2-a138-cc7750f9d539/download","vulnerability_count":82,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/8d/3d/5b498afb96013a28326f4f4c9f178d67f36b71cd2a458a0bd96b91d90101/embed_anything-0.7.1-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"a375dee7-b37d-58bc-b27b-df87b83a4db9","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a375dee7-b37d-58bc-b27b-df87b83a4db9/download","vulnerability_count":74,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/de/8b/fd6f38bc329e8192308d0b30d0197312ad962aac0d2a912fbc4ae3f9e10f/embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"735b8ee4-4188-5f68-aede-44af42e23a34","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/735b8ee4-4188-5f68-aede-44af42e23a34/download","vulnerability_count":71,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/ae/4c/d8b42aff1830ec75e4407372d62f673bd30c2db7abefc123f03c964a20dd/embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"29a7fbe5-9ada-52cc-a286-5314ab651aea","path":"embed_anything-0.7.1.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/29a7fbe5-9ada-52cc-a286-5314ab651aea/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"067f02e9-f9b9-59d3-8e86-ae87bde2898d","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/067f02e9-f9b9-59d3-8e86-ae87bde2898d/download","vulnerability_count":82,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/cb/be/da083da4535933b7861ff3535fd2d06cabdca87e70c4ac766f4f4daebcee/embed_anything-0.7.1-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"846b5065-10cc-5d16-ab1c-7fd2a6b628d4","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/846b5065-10cc-5d16-ab1c-7fd2a6b628d4/download","vulnerability_count":74,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/47/ff/fb8c3e2820294f6b934cfc9e0b128b333201486cc085d673af979420cb53/embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"e902ce3c-a855-5d5a-8d73-f209b1bc53bb","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e902ce3c-a855-5d5a-8d73-f209b1bc53bb/download","vulnerability_count":71,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/85/d4/5c711d33989c8d653a6542d2c45e73f1a3028225814ce9d5a518c7fa78c5/embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"7fe2de60-f2fa-5abe-89ce-9a55d2607bcc","path":"embed_anything-0.7.1.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7fe2de60-f2fa-5abe-89ce-9a55d2607bcc/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"76a6a443-fd87-51cd-8600-ace827f21ee5","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/76a6a443-fd87-51cd-8600-ace827f21ee5/download","vulnerability_count":82,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/b4/11/e9b0f7d952b7974550045b469f02fc869dee1ca9dc60c1f3484fa41de11a/embed_anything-0.7.1-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"fa5be998-5099-5258-b6ca-a62a03ebd27b","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fa5be998-5099-5258-b6ca-a62a03ebd27b/download","vulnerability_count":74,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/a8/4b/2f6c09ff5655e7628b846773cdc26d777e35813875ca8976ebe900114e60/embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"edd4ff37-6227-53bd-a5f5-4c92b75514e1","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/edd4ff37-6227-53bd-a5f5-4c92b75514e1/download","vulnerability_count":71,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/44/67/fd0a899fc6873f18d136d6d6945fef3098c561c047ca517cc7c3b88b9c74/embed_anything-0.7.1-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"840378c5-69f7-51fa-84a4-d933e7be3ff5","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/840378c5-69f7-51fa-84a4-d933e7be3ff5/download","vulnerability_count":74,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/a3/7b/3cae937348b32ffcc42335fb4d185d4e0342e91ae766071ef4d687619bb8/embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"10621a6e-3c74-505b-a129-5b533e6a702d","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/10621a6e-3c74-505b-a129-5b533e6a702d/download","vulnerability_count":71,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/21/d9/da9b0ab3489808a284f7dd36c22e1c12e68ef011b7b5581ee1d03b9f28ba/embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"6fa947ed-2669-5167-b0bb-f34671ec9914","path":"embed_anything-0.7.1.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6fa947ed-2669-5167-b0bb-f34671ec9914/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"164e2f36-b86b-5535-af7c-7a89a80ab219","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/164e2f36-b86b-5535-af7c-7a89a80ab219/download","vulnerability_count":82,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"embed_anything-0.7.1-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/1c/7b/0093fd2c04598ab34841b25509407a32b278f6c663d0413dea224f7e2732/embed_anything-0.7.1-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"cf85360c-621c-598f-b8ef-6cbdb9e4c447","path":"embed_anything-0.7.1.dist-info/sboms/embed_anything_python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cf85360c-621c-598f-b8ef-6cbdb9e4c447/download","vulnerability_count":74,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":17,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-3336","aliases":["GHSA-cfwj-9wp5-wqvp","GHSA-vw5v-4f2q-w9xf","RUSTSEC-2026-0046"],"summary":"PKCS7_verify Certificate Chain Validation Bypass in AWS-LC","severity":"high","score":8.7,"package":"aws-lc-sys","version":"0.34.0","ecosystem":"crates.io","purl":"pkg:cargo/aws-lc-sys@0.34.0","fixed":["0.38.0"],"url":"https://insights.sbomify.com/CVE-2026-3336/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-18140","aliases":["GHSA-8ffr-xgwf-xj56"],"summary":"aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers","severity":"high","score":8.7,"package":"aws-smithy-json","version":"0.61.7","ecosystem":"crates.io","purl":"pkg:cargo/aws-smithy-json@0.61.7","fixed":["0.62.7"],"url":"https://insights.sbomify.com/CVE-2026-18140/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-42327","aliases":["GHSA-xp3w-r5p5-63rr"],"summary":"rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs","severity":"high","score":8.7,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-42327/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.25.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-31812","aliases":["GHSA-6xvm-j4wr-6v98","RUSTSEC-2026-0037"],"summary":"Denial of service in Quinn endpoints","severity":"high","score":8.7,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.14"],"url":"https://insights.sbomify.com/CVE-2026-31812/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-41898","aliases":["GHSA-hppc-g8h3-xhp3"],"summary":"rust-openssl: Unchecked callback length in PSK/cookie trampolines leaks adjacent memory to peer","severity":"high","score":8.3,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.78"],"url":"https://insights.sbomify.com/CVE-2026-41898/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-3337","aliases":["GHSA-65p9-r9h6-22vj","GHSA-frmv-5gcm-jwxh","RUSTSEC-2026-0043","RUSTSEC-2026-0045"],"summary":"Timing Side-Channel in AES-CCM Tag Verification in AWS-LC","severity":"high","score":8.2,"package":"aws-lc-sys","version":"0.34.0","ecosystem":"crates.io","purl":"pkg:cargo/aws-lc-sys@0.34.0","fixed":["0.38.0"],"url":"https://insights.sbomify.com/CVE-2026-3337/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0044","aliases":["GHSA-394x-vwmw-crm3"],"summary":"AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN","severity":"high","score":8.2,"package":"aws-lc-sys","version":"0.34.0","ecosystem":"crates.io","purl":"pkg:cargo/aws-lc-sys@0.34.0","fixed":["0.39.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0044","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-41681","aliases":["GHSA-ghm9-cr32-g9qj"],"summary":"rust-openssl: rustMdCtxRef::digest_final() writes past caller buffer with no length check","severity":"high","score":8.1,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.78"],"url":"https://insights.sbomify.com/CVE-2026-41681/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-33055","aliases":["GHSA-gchp-q4r4-x4ff","RUSTSEC-2026-0068"],"summary":"tar-rs incorrectly ignores PAX size headers if header size is nonzero","severity":"high","score":8.1,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.45"],"url":"https://insights.sbomify.com/CVE-2026-33055/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-3338","aliases":["GHSA-hfpc-8r3f-gw53","GHSA-jchq-39cv-q4wj","RUSTSEC-2026-0047"],"summary":"PKCS7_verify Signature Validation Bypass in AWS-LC","severity":"high","score":7.5,"package":"aws-lc-sys","version":"0.34.0","ecosystem":"crates.io","purl":"pkg:cargo/aws-lc-sys@0.34.0","fixed":["0.38.0"],"url":"https://insights.sbomify.com/CVE-2026-3338/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0187","aliases":["GHSA-6fj4-rcr3-r7rr"],"summary":"Stack overflow in lopdf via deeply nested PDF objects","severity":"high","score":7.5,"package":"lopdf","version":"0.36.0","ecosystem":"crates.io","purl":"pkg:cargo/lopdf@0.36.0","fixed":["0.42.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0187","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0414","aliases":[],"summary":"Exponential event growth with `ENABLE_WIKILINKS`","severity":"high","score":7.5,"package":"pulldown-cmark","version":"0.13.0","ecosystem":"crates.io","purl":"pkg:cargo/pulldown-cmark@0.13.0","fixed":["0.13.5"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0414","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0433","aliases":[],"summary":"Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`","severity":"high","score":7.5,"package":"pulldown-cmark","version":"0.13.0","ecosystem":"crates.io","purl":"pkg:cargo/pulldown-cmark@0.13.0","fixed":["0.13.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0433","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-25800","aliases":["GHSA-4w2j-m93h-cj5j","RUSTSEC-2026-0185"],"summary":" Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.15"],"url":"https://insights.sbomify.com/CVE-2026-25800/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93599","aliases":["GHSA-82j2-j2ch-gfr8","RUSTSEC-2026-0104"],"summary":"Reachable panic in certificate revocation list parsing","severity":"high","score":7.5,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.13"],"url":"https://insights.sbomify.com/CVE-2026-93599/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93599","aliases":["GHSA-82j2-j2ch-gfr8","RUSTSEC-2026-0104"],"summary":"Reachable panic in certificate revocation list parsing","severity":"high","score":7.5,"package":"rustls-webpki","version":"0.103.8","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.8","fixed":["0.103.13"],"url":"https://insights.sbomify.com/CVE-2026-93599/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-4428","aliases":["GHSA-9f94-5g5w-gf6r","RUSTSEC-2026-0042","RUSTSEC-2026-0048"],"summary":"CRL Distribution Point Scope Check Logic Error in AWS-LC","severity":"high","score":7.4,"package":"aws-lc-sys","version":"0.34.0","ecosystem":"crates.io","purl":"pkg:cargo/aws-lc-sys@0.34.0","fixed":["0.39.0"],"url":"https://insights.sbomify.com/CVE-2026-4428/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115908","aliases":["GHSA-hjqx-j4rw-g7xv"],"summary":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. ","severity":"high","score":7.4,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115908/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-41676","aliases":["GHSA-pqf5-4pqq-29f5"],"summary":"rust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.1","severity":"high","score":7.2,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.78"],"url":"https://insights.sbomify.com/CVE-2026-41676/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-41678","aliases":["GHSA-8c75-8mhr-p7r9","RUSTSEC-2026-0463"],"summary":"Out-of-bounds write in `aes::unwrap_key`","severity":"high","score":7.2,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.78"],"url":"https://insights.sbomify.com/CVE-2026-41678/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0450","aliases":[],"summary":"`ocipkg`: unpacking an OCI archive can write and delete files outside the local image store (path traversal)","severity":"high","score":7.1,"package":"ocipkg","version":"0.2.9","ecosystem":"crates.io","purl":"pkg:cargo/ocipkg@0.2.9","fixed":["0.4.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0450","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.44","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.44","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-33056","aliases":["GHSA-j4xf-2g29-59ph","RUSTSEC-2026-0067"],"summary":"`unpack_in` can chmod arbitrary directories by following symlinks","severity":"medium","score":6.5,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.45"],"url":"https://insights.sbomify.com/CVE-2026-33056/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.25.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.35","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.35","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-44662","aliases":["GHSA-xv59-967r-8726"],"summary":"rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding","severity":"medium","score":5.1,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-44662/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-45784","aliases":["GHSA-phqj-4mhp-q6mq"],"summary":"rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers","severity":"medium","score":5.1,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.80"],"url":"https://insights.sbomify.com/CVE-2026-45784/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"CVE-2026-93602","aliases":["GHSA-pwjx-qhcg-rvj4","RUSTSEC-2026-0049"],"summary":"CRLs not considered authoritative by Distribution Point due to faulty matching logic","severity":"medium","score":4.4,"package":"rustls-webpki","version":"0.103.8","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.8","fixed":["0.103.10"],"url":"https://insights.sbomify.com/CVE-2026-93602/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.35","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.35","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.35","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.35","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.35","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.35","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0002","aliases":["GHSA-rhfx-m35p-ff5j"],"summary":"`IterMut` violates Stacked Borrows by invalidating internal pointer","severity":"low","score":2.7,"package":"lru","version":"0.12.5","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.12.5","fixed":["0.16.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0002","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93600","aliases":["GHSA-965h-392x-2mh5","RUSTSEC-2026-0098"],"summary":"Name constraints for URI names were incorrectly accepted","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93600/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93600","aliases":["GHSA-965h-392x-2mh5","RUSTSEC-2026-0098"],"summary":"Name constraints for URI names were incorrectly accepted","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.103.8","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.8","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93600/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93601","aliases":["GHSA-xgp8-3hg3-c2mh","RUSTSEC-2026-0099"],"summary":"Name constraints were accepted for certificates asserting a wildcard name","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93601/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93601","aliases":["GHSA-xgp8-3hg3-c2mh","RUSTSEC-2026-0099"],"summary":"Name constraints were accepted for certificates asserting a wildcard name","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.103.8","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.8","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93601/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-41677","aliases":["GHSA-xmgf-hq76-4vx2"],"summary":"rust-opennssl has an Out-of-bounds read in PEM password callback when returning an oversized length","severity":"low","score":1.7,"package":"openssl","version":"0.10.73","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.73","fixed":["0.10.78"],"url":"https://insights.sbomify.com/CVE-2026-41677/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.98","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.98","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.4.9","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.4.9","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.3.27","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.3.27","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.15","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.15","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.12.5","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.12.5","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.5","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.5","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0119","aliases":[],"summary":"number_prefix crate is unmaintained","severity":"unknown","score":null,"package":"number_prefix","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/number_prefix@0.4.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0119","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0449","aliases":[],"summary":"`ocipkg` is unmaintained","severity":"unknown","score":null,"package":"ocipkg","version":"0.2.9","ecosystem":"crates.io","purl":"pkg:cargo/ocipkg@0.2.9","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0449","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0173","aliases":[],"summary":"proc-macro-error2 is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error2","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error2@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0173","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.12","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.12","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.10.0","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.10.0","fixed":["0.10.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.9.1","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.9.1","fixed":["0.9.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"1.0.4","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@1.0.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.8","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.8","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"GHSA-3pv8-6f4r-ffg2","aliases":[],"summary":"tar has a PAX header desynchronization issue","severity":"unknown","score":null,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.46"],"url":"https://osv.dev/vulnerability/GHSA-3pv8-6f4r-ffg2","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-root-certs","version":"1.0.0","ecosystem":"crates.io","purl":"pkg:cargo/webpki-root-certs@1.0.0","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.0","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.0","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"1.1.4","ecosystem":"crates.io","purl":"pkg:cargo/zip@1.1.4","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["embed_anything-0.7.1-cp310-cp310-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp310-cp310-win_amd64.whl","embed_anything-0.7.1-cp311-cp311-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp311-cp311-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp311-cp311-win_amd64.whl","embed_anything-0.7.1-cp312-cp312-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp312-cp312-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp312-cp312-win_amd64.whl","embed_anything-0.7.1-cp313-cp313-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp313-cp313-win_amd64.whl","embed_anything-0.7.1-cp314-cp314-macosx_11_0_arm64.whl","embed_anything-0.7.1-cp314-cp314-manylinux_2_34_x86_64.whl","embed_anything-0.7.1-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":17,"total_sboms":17,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":4,"high":28,"medium":11,"low":10,"unknown":29}}}