{"url":"https://pypi.sbomify.com/package/gluesql/0.19.0","markdown_url":"https://pypi.sbomify.com/package/gluesql/0.19.0.md","name":"gluesql","version":"0.19.0","purl":"pkg:pypi/gluesql@0.19.0","summary":"GlueSQL is quite sticky. It attaches to anywhere.","author":null,"project_urls":{"Documentation":"https://gluesql.org/docs/","Homepage":"https://gluesql.org","Repository":"https://github.com/gluesql/gluesql-py"},"requires_python":">=3.10","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Rust"],"wheels":[{"filename":"gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b1/b3/d1c5a0d5e8b610dec6cb6a13ee12434d6b6ad67f6cb6b558130f42352b6f/gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8c6af3d1-b4fc-5f4e-9d77-41e89b3eab36","path":"gluesql-0.19.0.dist-info/sboms/gluesql-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8c6af3d1-b4fc-5f4e-9d77-41e89b3eab36/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"gluesql/gluesql-py","workflow":"publish-python.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/gluesql/gluesql-py","1.3.6.1.4.1.57264.1.13":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"1256096517","1.3.6.1.4.1.57264.1.16":"https://github.com/gluesql","1.3.6.1.4.1.57264.1.17":"69316759","1.3.6.1.4.1.57264.1.18":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/gluesql/gluesql-py/actions/runs/26762714225/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/68/74/ba74ec6c30546cf038f334cc01140078b09f30babd347b657f43c7ee1c61/gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"abc4c6fb-7fbd-5ece-821f-ead02b888176","path":"gluesql-0.19.0.dist-info/sboms/gluesql-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/abc4c6fb-7fbd-5ece-821f-ead02b888176/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"gluesql/gluesql-py","workflow":"publish-python.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/gluesql/gluesql-py","1.3.6.1.4.1.57264.1.13":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"1256096517","1.3.6.1.4.1.57264.1.16":"https://github.com/gluesql","1.3.6.1.4.1.57264.1.17":"69316759","1.3.6.1.4.1.57264.1.18":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/gluesql/gluesql-py/actions/runs/26762714225/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl","url":"https://files.pythonhosted.org/packages/be/d8/3eb91ce77fca052ea5cd4c676df6c5f785374112f0773e39d0931966d14a/gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl","sboms":[{"artifact_uuid":"48ffe9d2-b4ae-5125-8154-810cb6a46839","path":"gluesql-0.19.0.dist-info/sboms/gluesql-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/48ffe9d2-b4ae-5125-8154-810cb6a46839/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"gluesql/gluesql-py","workflow":"publish-python.yml","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.10":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/gluesql/gluesql-py","1.3.6.1.4.1.57264.1.13":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.14":"refs/heads/main","1.3.6.1.4.1.57264.1.15":"1256096517","1.3.6.1.4.1.57264.1.16":"https://github.com/gluesql","1.3.6.1.4.1.57264.1.17":"69316759","1.3.6.1.4.1.57264.1.18":"https://github.com/gluesql/gluesql-py/.github/workflows/publish-python.yml@refs/heads/main","1.3.6.1.4.1.57264.1.19":"01ea93d21bf72effd04d9d3f90f867705581222c","1.3.6.1.4.1.57264.1.20":"workflow_dispatch","1.3.6.1.4.1.57264.1.21":"https://github.com/gluesql/gluesql-py/actions/runs/26762714225/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":3,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0247","aliases":[],"summary":"bitmaps is unmaintained","severity":"unknown","score":null,"package":"bitmaps","version":"2.1.0","ecosystem":"crates.io","purl":"pkg:cargo/bitmaps@2.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0247","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2025-0057","aliases":[],"summary":"fxhash - no longer maintained","severity":"unknown","score":null,"package":"fxhash","version":"0.2.1","ecosystem":"crates.io","purl":"pkg:cargo/fxhash@0.2.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0057","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2023-0126","aliases":[],"summary":"Aliasing violation in `OrdSet` insertion","severity":"unknown","score":null,"package":"im","version":"15.1.0","ecosystem":"crates.io","purl":"pkg:cargo/im@15.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2023-0126","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0248","aliases":[],"summary":"im is unmaintained","severity":"unknown","score":null,"package":"im","version":"15.1.0","ecosystem":"crates.io","purl":"pkg:cargo/im@15.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0248","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2024-0384","aliases":[],"summary":"`instant` is unmaintained","severity":"unknown","score":null,"package":"instant","version":"0.1.13","ecosystem":"crates.io","purl":"pkg:cargo/instant@0.1.13","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0384","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.7.46","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.46","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0251","aliases":[],"summary":"sized-chunks is unmaintained","severity":"unknown","score":null,"package":"sized-chunks","version":"0.6.5","ecosystem":"crates.io","purl":"pkg:cargo/sized-chunks@0.6.5","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0251","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0255","aliases":[],"summary":"Panic-safety unsoundness in `Chunk`, `RingBuffer`, and `InlineArray` (use-after-free / double-free)","severity":"unknown","score":null,"package":"sized-chunks","version":"0.6.5","ecosystem":"crates.io","purl":"pkg:cargo/sized-chunks@0.6.5","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0255","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["gluesql-0.19.0-cp312-cp312-macosx_11_0_arm64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","gluesql-0.19.0-cp312-cp312-manylinux_2_24_aarch64.whl"]}],"vulnerability_scan":{"scanned_sboms":3,"total_sboms":3,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":12}}}