{"url":"https://pypi.sbomify.com/package/funget/1.2.0","markdown_url":"https://pypi.sbomify.com/package/funget/1.2.0.md","name":"funget","version":"1.2.0","purl":"pkg:pypi/funget@1.2.0","summary":"Concurrent HTTP downloads and uploads for Python","author":null,"project_urls":{"Organization":"https://github.com/farfarfun","Releases":"https://github.com/farfarfun/funget/releases","Repository":"https://github.com/farfarfun/funget"},"requires_python":">=3.12","license":null,"classifiers":["Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Rust"],"wheels":[{"filename":"funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/70/80/2f43d8859f9994736b3bb6442d00d3d3c4811f771027faed01448b89a5db/funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"478bb69e-3d10-5480-a161-e01cb8f689a7","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/478bb69e-3d10-5480-a161-e01cb8f689a7/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d8/71/ba568331feb1535181af65ccd363e5a2059dd36aec70e8b5bf947fd70f13/funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"81eaf931-80c7-5441-85e1-b455750ff7c7","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/81eaf931-80c7-5441-85e1-b455750ff7c7/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/4e/81/4ceae5a0b015bea03f301a0d247f221003cd742457fc5eb5e6261653b1e4/funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"b7dfc144-2265-58e6-bfb1-cf918453651d","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b7dfc144-2265-58e6-bfb1-cf918453651d/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/51/27/32ad04ccc4838e13b057e42a94f1a29842a8db8aa56f38c1e54b7aa11933/funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"be1f69ce-752b-5498-9fcf-ff63695e9c14","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/be1f69ce-752b-5498-9fcf-ff63695e9c14/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/b7/94/d39ad00e948e86301d8b39e3b2eb5b38939da3028d01748d2f3c12de722b/funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"0819b60c-7817-5e17-97d8-608efeb98172","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0819b60c-7817-5e17-97d8-608efeb98172/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"funget-1.2.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/6a/28/8c7eba6d262f744f8ef6b1da52e2959b21da5a1f82ffaabaecb79a65fb51/funget-1.2.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"0145b9c8-cbce-51d7-a088-3efcd44de02f","path":"funget-1.2.0.dist-info/sboms/funget-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0145b9c8-cbce-51d7-a088-3efcd44de02f/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":6,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0119","aliases":[],"summary":"number_prefix crate is unmaintained","severity":"unknown","score":null,"package":"number_prefix","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/number_prefix@0.4.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0119","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.2","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.2","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["funget-1.2.0-cp312-abi3-macosx_10_12_x86_64.whl","funget-1.2.0-cp312-abi3-macosx_11_0_arm64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","funget-1.2.0-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","funget-1.2.0-cp312-abi3-musllinux_1_2_x86_64.whl","funget-1.2.0-cp312-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":6,"total_sboms":6,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":1,"low":3,"unknown":4}}}