{"url":"https://pypi.sbomify.com/package/images-upload-cli/4.1.0","markdown_url":"https://pypi.sbomify.com/package/images-upload-cli/4.1.0.md","name":"images-upload-cli","version":"4.1.0","purl":"pkg:pypi/images-upload-cli@4.1.0","summary":"Upload images via APIs","author":null,"project_urls":{"Source Code":"https://github.com/deadnews/imgup"},"requires_python":null,"license":"MIT","classifiers":[],"wheels":[{"filename":"images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/44/03/ac4d7962d745b16c45cef6bc3a6f9b9bd329581c52d260573dcc9e3b9895/images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"dce378d4-0e05-5f58-975f-a841c48b3132","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dce378d4-0e05-5f58-975f-a841c48b3132/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/91/ba/a30997ca37e7924f5b709b3e7f2633cd8cb246cb34ac92ecee858f63f3f6/images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"7deb5822-3c94-5a15-9bb6-bd8c4a7c19ef","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7deb5822-3c94-5a15-9bb6-bd8c4a7c19ef/download","vulnerability_count":19,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/10/05/79ed7997745a14c1dd085de718150e10ad5dc14d04fa53925d76ae9fbecf/images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"36985738-9fef-5cb6-9552-0e02c208f98d","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/36985738-9fef-5cb6-9552-0e02c208f98d/download","vulnerability_count":19,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/fb/bd/8ecdd13f24e83e5b26f7fc506336f1b094c83723f0b9c92010e123e8c3ce/images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"80a1a4d2-9bdf-5f04-bd88-6c4932a8af85","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/80a1a4d2-9bdf-5f04-bd88-6c4932a8af85/download","vulnerability_count":19,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/05/f4/073ceee4b55fa46085fe92d3e71c5c829c13af588340571533662d02a0f6/images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"e37d04c8-06bd-5f93-a135-598c4b8ffd2f","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e37d04c8-06bd-5f93-a135-598c4b8ffd2f/download","vulnerability_count":19,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"images_upload_cli-4.1.0-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f4/75/302ff6704a05b55320363a8b53183f7c7a86fcbabc9658224c5727b23775/images_upload_cli-4.1.0-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"b7a750c8-d3df-5555-a632-2237fa1e781b","path":"images_upload_cli-4.1.0.dist-info/sboms/imgup.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b7a750c8-d3df-5555-a632-2237fa1e781b/download","vulnerability_count":13,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"deadnews/imgup","workflow":"main.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.10":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/deadnews/imgup","1.3.6.1.4.1.57264.1.13":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.14":"refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.15":"489074034","1.3.6.1.4.1.57264.1.16":"https://github.com/deadnews","1.3.6.1.4.1.57264.1.17":"8158661","1.3.6.1.4.1.57264.1.18":"https://github.com/deadnews/imgup/.github/workflows/main.yml@refs/tags/v4.1.0","1.3.6.1.4.1.57264.1.19":"a0069d3eb1866324830e0a21d3ae560e26839de8","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/deadnews/imgup/actions/runs/29250686233/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":6,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.41","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.41","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.41","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.41","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.41","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.41","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.41","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.41","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.15","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.15","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.21.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.21.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["images_upload_cli-4.1.0-py3-none-macosx_11_0_arm64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl","images_upload_cli-4.1.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0371","aliases":[],"summary":"`zbus_names` is unmaintained","severity":"unknown","score":null,"package":"zbus_names","version":"4.3.3","ecosystem":"crates.io","purl":"pkg:cargo/zbus_names@4.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0371","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0370","aliases":[],"summary":"`zvariant` is unmaintained","severity":"unknown","score":null,"package":"zvariant","version":"5.13.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant@5.13.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0370","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0372","aliases":[],"summary":"`zvariant_derive` is unmaintained","severity":"unknown","score":null,"package":"zvariant_derive","version":"5.13.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant_derive@5.13.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0372","wheels":["images_upload_cli-4.1.0-py3-none-manylinux_2_28_aarch64.whl","images_upload_cli-4.1.0-py3-none-manylinux_2_28_x86_64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_aarch64.whl","images_upload_cli-4.1.0-py3-none-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":6,"total_sboms":6,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":4,"medium":2,"low":2,"unknown":11}}}