{"url":"https://pypi.sbomify.com/package/goldy/0.2.0","markdown_url":"https://pypi.sbomify.com/package/goldy/0.2.0.md","name":"goldy","version":"0.2.0","purl":"pkg:pypi/goldy@0.2.0","summary":"Python bindings for the Goldy GPU library","author":"Mohamed Koubaa","project_urls":{"Documentation":"https://github.com/koubaa/goldy#readme","Homepage":"https://github.com/koubaa/goldy","Repository":"https://github.com/koubaa/goldy"},"requires_python":">=3.9","license":"MIT","classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.9","Programming Language :: Rust","Topic :: Multimedia :: Graphics","Topic :: Scientific/Engineering :: Visualization"],"wheels":[{"filename":"goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/23/c6/5ff1b809e056356fa726b7e49261c1f188bbce27ad09f6135383f2ab21cd/goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"a84c16ec-0ef9-5fd6-ac97-8610aef00ef0","path":"goldy-0.2.0.dist-info/sboms/goldy-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a84c16ec-0ef9-5fd6-ac97-8610aef00ef0/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"koubaa/goldy","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.10":"bba6aa25063d1cd04527ed4de61a069a1ed02ad2","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/koubaa/goldy","1.3.6.1.4.1.57264.1.13":"bba6aa25063d1cd04527ed4de61a069a1ed02ad2","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.15":"1131355172","1.3.6.1.4.1.57264.1.16":"https://github.com/koubaa","1.3.6.1.4.1.57264.1.17":"11414628","1.3.6.1.4.1.57264.1.18":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.19":"bba6aa25063d1cd04527ed4de61a069a1ed02ad2","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/koubaa/goldy/actions/runs/30053641510/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/1b/24/3ac28fb74053ef780bf9179906156fe1d0182bdf0147bfb98b0ce14e1dde/goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"cdaaae12-e8a6-5638-ab27-0959d5e3b542","path":"goldy-0.2.0.dist-info/sboms/goldy-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cdaaae12-e8a6-5638-ab27-0959d5e3b542/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"koubaa/goldy","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.10":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/koubaa/goldy","1.3.6.1.4.1.57264.1.13":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.15":"1131355172","1.3.6.1.4.1.57264.1.16":"https://github.com/koubaa","1.3.6.1.4.1.57264.1.17":"11414628","1.3.6.1.4.1.57264.1.18":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.19":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/koubaa/goldy/actions/runs/30767810111/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"goldy-0.2.0-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f9/6d/f5f6f78310bb21a5fb153b9e33dd65153aabd344eafaeea12c64df8bc29e/goldy-0.2.0-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"92fd9006-2936-53d3-9d3a-463e22279d10","path":"goldy-0.2.0.dist-info/sboms/goldy-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/92fd9006-2936-53d3-9d3a-463e22279d10/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"koubaa/goldy","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.10":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/koubaa/goldy","1.3.6.1.4.1.57264.1.13":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.15":"1131355172","1.3.6.1.4.1.57264.1.16":"https://github.com/koubaa","1.3.6.1.4.1.57264.1.17":"11414628","1.3.6.1.4.1.57264.1.18":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.19":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/koubaa/goldy/actions/runs/30767810111/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/56/55/708c4c2af8458dcf48d2cda635afad1f7b1eee2b55ec676613046ddc8da8/goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"5d3fadb2-90af-59d3-9e34-027201c82151","path":"goldy-0.2.0.dist-info/sboms/goldy-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5d3fadb2-90af-59d3-9e34-027201c82151/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"koubaa/goldy","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.10":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/koubaa/goldy","1.3.6.1.4.1.57264.1.13":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.15":"1131355172","1.3.6.1.4.1.57264.1.16":"https://github.com/koubaa","1.3.6.1.4.1.57264.1.17":"11414628","1.3.6.1.4.1.57264.1.18":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.19":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/koubaa/goldy/actions/runs/30767810111/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/1e/b0/c3f0b3314bd049d0ff9c5edd5e52a9148084b94b602e20678381a3b9511a/goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"b1f0dc75-f332-57e6-b6b2-f30847332a8e","path":"goldy-0.2.0.dist-info/sboms/goldy-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b1f0dc75-f332-57e6-b6b2-f30847332a8e/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"koubaa/goldy","workflow":"publish.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.10":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/koubaa/goldy","1.3.6.1.4.1.57264.1.13":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.15":"1131355172","1.3.6.1.4.1.57264.1.16":"https://github.com/koubaa","1.3.6.1.4.1.57264.1.17":"11414628","1.3.6.1.4.1.57264.1.18":"https://github.com/koubaa/goldy/.github/workflows/publish.yml@refs/tags/v0.2.0","1.3.6.1.4.1.57264.1.19":"90eb5386d070918151ec9fce705331df7a73b852","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/koubaa/goldy/actions/runs/30767810111/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.28.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.28.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["goldy-0.2.0-cp312-cp312-macosx_10_12_x86_64.whl","goldy-0.2.0-cp312-cp312-macosx_11_0_arm64.whl","goldy-0.2.0-cp312-cp312-win_amd64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","goldy-0.2.0-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"unknown":16}}}