{"url":"https://pypi.sbomify.com/package/hugr/0.18.8","markdown_url":"https://pypi.sbomify.com/package/hugr/0.18.8.md","name":"hugr","version":"0.18.8","purl":"pkg:pypi/hugr@0.18.8","summary":"Quantinuum's common representation for quantum programs","author":null,"project_urls":{"homepage":"https://github.com/quantinuum/hugr/tree/main/hugr-py","repository":"https://github.com/quantinuum/hugr/tree/main/hugr-py"},"requires_python":">=3.10","license":null,"classifiers":["Environment :: Console","Intended Audience :: Developers","Intended Audience :: Science/Research","License :: OSI Approved :: Apache Software License","Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX :: Linux","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Topic :: Scientific/Engineering"],"wheels":[{"filename":"hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/f0/c6/5de22a1fff50d335334daa5d90f92469af2bc2332c1b4578bb5bfc92ceab/hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"ef66db00-b1ee-54bf-9882-0c4bc10d1a40","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ef66db00-b1ee-54bf-9882-0c4bc10d1a40/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/53/a4/2e4e093f822add59df59924c8c7efed258ebe9c23e7863ea4f2736d857fa/hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"9b9f02d7-0a44-50c2-b53e-dfc801e84df4","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9b9f02d7-0a44-50c2-b53e-dfc801e84df4/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/10/cf/5bb1c52812f05bc3480bdb1b0bab01770dc69b538c0daa3ac4fd20034bcc/hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"084c0f44-9772-57fa-b47b-913626dacb33","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/084c0f44-9772-57fa-b47b-913626dacb33/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","url":"https://files.pythonhosted.org/packages/d1/48/9993b85301f33bc1c3024068fa34c4a6ecc16d949bfa4c99387a3cd21599/hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","sboms":[{"artifact_uuid":"d60e4fef-1fe5-5fbf-8fcf-f212e6dc42a9","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d60e4fef-1fe5-5fbf-8fcf-f212e6dc42a9/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","url":"https://files.pythonhosted.org/packages/fa/53/aa0cd49a7d8b6f503e1b73b3b56c6c0b18ddf5daa8e5f29a0001370e7a57/hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","sboms":[{"artifact_uuid":"83bd3dc4-37a2-5751-ae15-0ce3d9a7462b","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/83bd3dc4-37a2-5751-ae15-0ce3d9a7462b/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","url":"https://files.pythonhosted.org/packages/38/7a/d840ad75f1ebff8a50075ea379c0a994d020db12407f809acb52faa75513/hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","sboms":[{"artifact_uuid":"d888cbb0-1a89-50c2-980f-cee5253b53a8","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d888cbb0-1a89-50c2-980f-cee5253b53a8/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","url":"https://files.pythonhosted.org/packages/8a/ce/b7e982a867476d0c3232142e000de7fb7461955353408539b94b3f3dfe23/hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","sboms":[{"artifact_uuid":"f3818604-544d-5b0d-aca8-b327c57bfa15","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f3818604-544d-5b0d-aca8-b327c57bfa15/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/98/70/27c8485a18fc7dbce4da975e8dab3bc74e83312dae438d8fab7473259c44/hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"9edb7a47-51bb-5ac0-895d-adba5d80bd6f","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9edb7a47-51bb-5ac0-895d-adba5d80bd6f/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/e6/82/1cd7247d41b85ab2bbf2cc17151cece14bbb4bb7e8643196832bcb98d157/hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"7d1a86fc-847e-5d64-98fc-13bf590146cf","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7d1a86fc-847e-5d64-98fc-13bf590146cf/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","url":"https://files.pythonhosted.org/packages/dc/f9/7c29f12115fcf0c8e1573e3e836cfc5e23deab67157f154231993594b4f4/hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","sboms":[{"artifact_uuid":"ed02f763-2cf5-5b9d-b5dd-374cff221c41","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ed02f763-2cf5-5b9d-b5dd-374cff221c41/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/61/6e/ab73517b388548f5bb29ced046f439edee3b165d82ae290f1a0bc3978a01/hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"0b07ac6a-d9a6-5231-9ceb-8930db86a355","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0b07ac6a-d9a6-5231-9ceb-8930db86a355/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/64/11/7d6df656bd2d6964b5796bcb964809206841b5315b3ec5e2f8831bc3769a/hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"db63bed4-b2a3-5761-af25-21381808633c","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/db63bed4-b2a3-5761-af25-21381808633c/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-win32.whl","url":"https://files.pythonhosted.org/packages/c5/b2/b4c4d8d8090960bccd9218c1523abc86e5bb8ec8eb135f46f7cee295ce79/hugr-0.18.8-cp310-abi3-win32.whl","sboms":[{"artifact_uuid":"b08b4ab3-d76e-5d7a-ae6a-882d396244fd","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b08b4ab3-d76e-5d7a-ae6a-882d396244fd/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0f/be/14b5e33d4e8994a3648dd37d6d7c66fc508474f0bd12e0e2619ef9ebc5a6/hugr-0.18.8-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"c4177198-9d62-5b67-83a1-9e4b41c49c4f","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c4177198-9d62-5b67-83a1-9e4b41c49c4f/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/56/86/bf06353eadb1e15e853955eb04e75257c672e6e1f4acf305fc98c5da8856/hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"f1ad3c70-fa19-5011-aea7-dbab805bdc0c","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f1ad3c70-fa19-5011-aea7-dbab805bdc0c/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/ba/a4/ecff16175d89b1633435554b508665b76ac8d7577932d9328defe55c0a52/hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"534bfc29-507c-5f72-85e3-c81471397664","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/534bfc29-507c-5f72-85e3-c81471397664/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/8a/e8/12ee3a2e648288d3b538210484ee69c4ff5e91f27372a5322a9e888a3de7/hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"34e1b3f2-ff47-5ef1-b985-27428b158024","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/34e1b3f2-ff47-5ef1-b985-27428b158024/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","url":"https://files.pythonhosted.org/packages/b0/20/137fdb8dc1d0a81c2089ed5bd29ac4cacb70000d2d5d43f207e22ca6189a/hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","sboms":[{"artifact_uuid":"33f463c9-f9e9-5d34-b74b-bffdb60bc8c2","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/33f463c9-f9e9-5d34-b74b-bffdb60bc8c2/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","url":"https://files.pythonhosted.org/packages/b5/3e/1eab9aa9b4583509b0a802264b853a04324570d65f3a9b986156a16bfd12/hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","sboms":[{"artifact_uuid":"c1604180-45b1-54d1-8021-acd469fc2d7b","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c1604180-45b1-54d1-8021-acd469fc2d7b/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","url":"https://files.pythonhosted.org/packages/46/47/0be24549b3794d09a61741ab382fdd784dc8ffa0f2cd26b08730d6cf4dfa/hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","sboms":[{"artifact_uuid":"8ec0b925-e5cd-5bf3-8c9e-b81388a57ad2","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8ec0b925-e5cd-5bf3-8c9e-b81388a57ad2/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","url":"https://files.pythonhosted.org/packages/9a/2f/3b5c9363e4abe0aac7307fa8d8a786ab4754b94f5df1e97329e038f6985a/hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","sboms":[{"artifact_uuid":"bd9ca899-da4a-5cd8-8e60-689092f981ee","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bd9ca899-da4a-5cd8-8e60-689092f981ee/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/b9/99/050deb99613b8d4ed089435c9e523e790cbf33e3e4d136dc6b42ebd51809/hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"1d71267e-41de-5a02-a4f6-61b7a4043a8d","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1d71267e-41de-5a02-a4f6-61b7a4043a8d/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/d5/63/7c293655fe3224e06cc648824148a70401596b593f7db0efaaf2a2b5354c/hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"6de01937-5a18-57a5-bd61-d7da3d236b34","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6de01937-5a18-57a5-bd61-d7da3d236b34/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","url":"https://files.pythonhosted.org/packages/4a/fc/5d8f721cbb6156c279615d494f9b12c5079cd9683864fa4a6d476db5c766/hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","sboms":[{"artifact_uuid":"94424283-e1cb-500d-8166-c54968ecf5f5","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/94424283-e1cb-500d-8166-c54968ecf5f5/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","url":"https://files.pythonhosted.org/packages/8a/b6/8d65eef54194a0c053fb87268b836aa139415324c5817e8b43acf97c6d6b/hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","sboms":[{"artifact_uuid":"7db0a9f6-d4bb-5286-aaa3-0935bd1b39f2","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7db0a9f6-d4bb-5286-aaa3-0935bd1b39f2/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/5d/d8/ee00bef985b4638dcd52ee6a79a011536823cd0e951a9bf3c684bcb69a8d/hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"a87c9bfc-f945-570c-a927-5bc46e352ce3","path":"hugr-0.18.8.dist-info/sboms/hugr-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a87c9bfc-f945-570c-a927-5bc46e352ce3/download","vulnerability_count":17,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":26,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0196","aliases":[],"summary":"`cgmath` is unmaintained","severity":"unknown","score":null,"package":"cgmath","version":"0.18.0","ecosystem":"crates.io","purl":"pkg:cargo/cgmath@0.18.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0196","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0197","aliases":[],"summary":"`Matrix{2,3,4}::swap_columns` can trigger undefined behavior for identical indices","severity":"unknown","score":null,"package":"cgmath","version":"0.18.0","ecosystem":"crates.io","purl":"pkg:cargo/cgmath@0.18.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0197","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2025-0057","aliases":[],"summary":"fxhash - no longer maintained","severity":"unknown","score":null,"package":"fxhash","version":"0.2.1","ecosystem":"crates.io","purl":"pkg:cargo/fxhash@0.2.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0057","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.14.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.14.0","fixed":["0.13.4","0.14.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.1.0+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.1.0%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["hugr-0.18.8-cp310-abi3-macosx_10_12_x86_64.whl","hugr-0.18.8-cp310-abi3-macosx_11_0_arm64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_i686.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_s390x.whl","hugr-0.18.8-cp310-abi3-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_i686.whl","hugr-0.18.8-cp310-abi3-musllinux_1_2_x86_64.whl","hugr-0.18.8-cp310-abi3-win32.whl","hugr-0.18.8-cp310-abi3-win_amd64.whl","hugr-0.18.8-cp314-cp314t-macosx_10_12_x86_64.whl","hugr-0.18.8-cp314-cp314t-macosx_11_0_arm64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_aarch64.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_armv7l.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_i686.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_ppc64le.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_s390x.whl","hugr-0.18.8-cp314-cp314t-manylinux_2_28_x86_64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_aarch64.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_armv7l.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_i686.whl","hugr-0.18.8-cp314-cp314t-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":26,"total_sboms":26,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"unknown":17}}}