{"url":"https://pypi.sbomify.com/package/fastsim/3.1.0","markdown_url":"https://pypi.sbomify.com/package/fastsim/3.1.0.md","name":"fastsim","version":"3.1.0","purl":"pkg:pypi/fastsim@3.1.0","summary":"Tool for modeling vehicle powertrains","author":null,"project_urls":{"Homepage":"https://www.nlr.gov/transportation/fastsim"},"requires_python":"<3.16,>=3.10","license":null,"classifiers":["License :: Other/Proprietary License","Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX","Programming Language :: Python :: 3"],"wheels":[{"filename":"fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/ee/be/3f1fa178ee1db0c22e4205ce5cb5ce7b0a49bed16f1c8f18c0fb81a44941/fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"91910ba7-0fc9-5cbc-b111-e0637ba861c9","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/91910ba7-0fc9-5cbc-b111-e0637ba861c9/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/66/e1/5bd3db3bb154d008d922c2fdd064bd5db88edbbb9ca2f8a06f385a2b5e74/fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"d26382a1-622d-5c2b-8d0a-762a3c4020a0","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d26382a1-622d-5c2b-8d0a-762a3c4020a0/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/54/af/d517ae264690fa442345a83d840e4874c468aed88682d9bd14b6d98c9014/fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"7905c662-f007-5c13-a596-3ad3616731f7","path":"fastsim-3.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7905c662-f007-5c13-a596-3ad3616731f7/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"355ad9de-4381-5efb-8f7d-5372309577dd","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/355ad9de-4381-5efb-8f7d-5372309577dd/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/61/02/a442eb75c0d0352fac16e7422c9ec4c16e51233cf31e2a54487f162cb435/fastsim-3.1.0-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"41e9eb57-f5e8-58fc-bdd2-3e9da335d903","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/41e9eb57-f5e8-58fc-bdd2-3e9da335d903/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/a6/ac/778cb730e8713d602ba2a82934e9f9d53547213405435f1b4ab600f9bfd9/fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"1c5e2bd9-8f0e-583f-ab5c-8448696fd16d","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1c5e2bd9-8f0e-583f-ab5c-8448696fd16d/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/21/9a/d767d08d865dadc30bc1ffac732b6604762a25a25e1a1b2f6a6e4a29f11d/fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"10a6bacd-76bd-55aa-85b6-ed768c1140f6","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/10a6bacd-76bd-55aa-85b6-ed768c1140f6/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/b5/81/77696a6348bca3abb32759b9019361f3bed01cff015d62e3aedd39b535f9/fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"f8ea5489-264a-5615-bdf3-16c671faea8f","path":"fastsim-3.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f8ea5489-264a-5615-bdf3-16c671faea8f/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"6ab1b7f1-8cee-5d8a-a168-6ef770c931d9","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6ab1b7f1-8cee-5d8a-a168-6ef770c931d9/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/38/40/608cfc330f2a8b1303beb5d02140cadf0f6920ddd1defb7764576848af58/fastsim-3.1.0-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"70828309-7142-575e-a8b1-bf91a2bf9f4f","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/70828309-7142-575e-a8b1-bf91a2bf9f4f/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","url":"https://files.pythonhosted.org/packages/90/7d/29c4950adcda0a221dae54286c4259c3e3770f7d39978bfe83001a5f19fe/fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","sboms":[{"artifact_uuid":"6dbf2d2b-758a-5bd3-a87c-33459379411e","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6dbf2d2b-758a-5bd3-a87c-33459379411e/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/1e/b1/2cf3f34deb2f0b931308e251415579a0ae7532e0f475331047c733781c9e/fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"fb52d1c7-c7bb-5114-a555-dd3fec7c7423","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fb52d1c7-c7bb-5114-a555-dd3fec7c7423/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/0e/99/cd0bdbc49dc32036d9b59b36f51d02cb9d11003b42fba43142d23d9cb752/fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"219975a7-3d19-598c-b0da-b50e932d73ad","path":"fastsim-3.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/219975a7-3d19-598c-b0da-b50e932d73ad/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"7024693a-579c-59e5-8818-fa1b8360835e","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7024693a-579c-59e5-8818-fa1b8360835e/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/94/79/13b276dee0cf55a045b9dc1edd3bf82aa054f12fe8724aafa9aab6bb0d45/fastsim-3.1.0-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"3920aed0-8735-5a2b-a01a-a63ecd860b41","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3920aed0-8735-5a2b-a01a-a63ecd860b41/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","url":"https://files.pythonhosted.org/packages/c5/22/c55637bdd8d6a07686a95e16a5576f1a88d30f1b61832f8c029c35906fd7/fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","sboms":[{"artifact_uuid":"57f74288-3f4d-51f4-8b0e-b05f3f02143f","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/57f74288-3f4d-51f4-8b0e-b05f3f02143f/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d8/4c/bcaf05aaec364ee4427f3ff4414e0633417a72d228a4e39d1a7c4509bbdd/fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"4d3badea-3327-5195-b8a0-2b3afca098eb","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4d3badea-3327-5195-b8a0-2b3afca098eb/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/47/66/c92cda4f10e30fd7bdab8ba6b394dc1d204ce9e50314f6e9cac6de696ba0/fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"17735607-a697-5f8e-bb3c-c44541f549a1","path":"fastsim-3.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/17735607-a697-5f8e-bb3c-c44541f549a1/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"61c6c1a7-65c5-5cd2-baef-546208bfa488","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/61c6c1a7-65c5-5cd2-baef-546208bfa488/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0d/9f/a02ff9abbd9c2085dfee0adfdfddae1daf20f840eb3a1ae789c54884255d/fastsim-3.1.0-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"7d07ff21-7576-5795-8414-acc7f85fd309","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7d07ff21-7576-5795-8414-acc7f85fd309/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","url":"https://files.pythonhosted.org/packages/d7/20/5449bba5b811b1aae0c250857d84bd6f89d2d4c04300afbea0d0bbb04995/fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","sboms":[{"artifact_uuid":"07d6bdf5-81bf-51d1-b80a-c367262e53ff","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/07d6bdf5-81bf-51d1-b80a-c367262e53ff/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/7b/0f/68c97390afbcae63b5283c800fceb14b6d68842cb9748eac5559a10c839b/fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"a4b8323e-3392-520b-b72a-36c898ae2459","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a4b8323e-3392-520b-b72a-36c898ae2459/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/09/e8/3a5e32a6b6770e7d6aaa5d0e66e3b2cd32be9afbbe8129620f3246f2f8ef/fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"b3be2846-9e45-52bd-987c-abf46ecfdbd0","path":"fastsim-3.1.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b3be2846-9e45-52bd-987c-abf46ecfdbd0/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"313bbd8d-1e97-5a32-80b1-eb360458ac46","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/313bbd8d-1e97-5a32-80b1-eb360458ac46/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"fastsim-3.1.0-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/30/9f/3f733ea2fa7173b25d1d629c616ea5482b3e7b85c3230cc39b509bc8a8b4/fastsim-3.1.0-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"56d38b2b-8b2f-55de-b6f9-d82fd5da546d","path":"fastsim-3.1.0.dist-info/sboms/fastsim-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/56d38b2b-8b2f-55de-b6f9-d82fd5da546d/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":25,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2024-12224","aliases":["GHSA-h97m-ww89-6jmq","RUSTSEC-2024-0421"],"summary":"`idna` accepts Punycode labels that do not produce any non-ASCII when decoded","severity":"medium","score":6.3,"package":"idna","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/idna@0.4.0","fixed":["1.0.0"],"url":"https://insights.sbomify.com/CVE-2024-12224/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.43","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.43","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0384","aliases":[],"summary":"`instant` is unmaintained","severity":"unknown","score":null,"package":"instant","version":"0.1.13","ecosystem":"crates.io","purl":"pkg:cargo/instant@0.1.13","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0384","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.29","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.29","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0370","aliases":[],"summary":"proc-macro-error is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error","version":"1.0.4","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error@1.0.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0370","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2024-0320","aliases":[],"summary":"yaml-rust is unmaintained.","severity":"unknown","score":null,"package":"yaml-rust","version":"0.4.5","ecosystem":"crates.io","purl":"pkg:cargo/yaml-rust@0.4.5","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0320","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"0.6.6","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.6.6","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"5.0.2+zstd.1.5.2","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@5.0.2%2Bzstd.1.5.2","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["fastsim-3.1.0-cp310-cp310-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp310-cp310-macosx_11_0_arm64.whl","fastsim-3.1.0-cp310-cp310-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp310-cp310-win_amd64.whl","fastsim-3.1.0-cp311-cp311-macosx_10_12_x86_64.whl","fastsim-3.1.0-cp311-cp311-macosx_11_0_arm64.whl","fastsim-3.1.0-cp311-cp311-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp311-cp311-win_amd64.whl","fastsim-3.1.0-cp312-cp312-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp312-cp312-macosx_11_0_arm64.whl","fastsim-3.1.0-cp312-cp312-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp312-cp312-win_amd64.whl","fastsim-3.1.0-cp313-cp313-macosx_10_13_x86_64.whl","fastsim-3.1.0-cp313-cp313-macosx_11_0_arm64.whl","fastsim-3.1.0-cp313-cp313-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp313-cp313-win_amd64.whl","fastsim-3.1.0-cp314-cp314-macosx_10_15_x86_64.whl","fastsim-3.1.0-cp314-cp314-macosx_11_0_arm64.whl","fastsim-3.1.0-cp314-cp314-manylinux_2_34_x86_64.whl","fastsim-3.1.0-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":25,"total_sboms":25,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":2,"medium":4,"low":2,"unknown":20}}}