{"url":"https://pypi.sbomify.com/package/keeper-pam-webrtc-rs/2.2.13","markdown_url":"https://pypi.sbomify.com/package/keeper-pam-webrtc-rs/2.2.13.md","name":"keeper-pam-webrtc-rs","version":"2.2.13","purl":"pkg:pypi/keeper-pam-webrtc-rs@2.2.13","summary":"Keeper PAM WebRTC for Python - A secure, stable, and high-performance Tube API for Python, providing WebRTC-based secure tunneling with enterprise-grade security and reliability optimizations.","author":null,"project_urls":{},"requires_python":">=3.8","license":"MIT","classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Programming Language :: Rust","Topic :: Communications","Topic :: Security"],"wheels":[{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/0a/79/a049f057cfb56a1c8dfc61c6fdcadd87baef0ca9363965dda1fd375d0ba0/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"bc49d842-0083-5d65-84ff-b34be26b0a98","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bc49d842-0083-5d65-84ff-b34be26b0a98/download","vulnerability_count":42,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/c7/d6/2c1f148fc22acef75f1fb9882ce3481aa3c6dfb4daddd58f798f336596f7/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"196525c5-5ec9-5c24-988e-8e993b00240d","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/196525c5-5ec9-5c24-988e-8e993b00240d/download","vulnerability_count":42,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/4f/b1/9eee15cc049885afecc0e11cd87a287b12a9fc01430b1512e87f9343e111/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"db3cc26b-73e7-5521-a163-f9de248c80fc","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/db3cc26b-73e7-5521-a163-f9de248c80fc/download","vulnerability_count":44,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/b2/fb/6bae16aadd7b7a8d976d26712cc2b37b1c3f121b308fd1b0195fd5284c43/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"027d6433-8b32-5b80-ac3f-cbc16d5c5bc6","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/027d6433-8b32-5b80-ac3f-cbc16d5c5bc6/download","vulnerability_count":44,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/67/6a/94d3b8ee249c374de048f4fab3a2214438a73615feda73115e2e2f112132/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"51f4e42f-772b-5eb8-99e8-2183b913f674","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/51f4e42f-772b-5eb8-99e8-2183b913f674/download","vulnerability_count":0,"scan_error":null},{"artifact_uuid":"a599aa5a-f4ee-5ca3-bc77-3331a7e6d351","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a599aa5a-f4ee-5ca3-bc77-3331a7e6d351/download","vulnerability_count":44,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/ec/b9/76dbd1892b61be84f397eeb9b064f709155f4d6bd5a0f227b60279c2a41b/keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"a6b3bccb-4d84-5056-9d4c-e43e954a1fd2","path":"keeper_pam_webrtc_rs-2.2.13.dist-info/sboms/keeper-pam-webrtc-rs-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a6b3bccb-4d84-5056-9d4c-e43e954a1fd2/download","vulnerability_count":43,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-123607","aliases":["GHSA-3v94-mw7p-v465","RUSTSEC-2026-0118","RUSTSEC-2026-0120"],"summary":"NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses","severity":"high","score":8.7,"package":"hickory-proto","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto@0.25.2","fixed":["0.26.0-beta.1"],"url":"https://insights.sbomify.com/CVE-2026-123607/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-123604","aliases":["GHSA-6w6g-hm98-mhgm"],"summary":"hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)","severity":"high","score":8.7,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123604/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-116794","aliases":["GHSA-vp5q-ff62-jwqv"],"summary":"russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation","severity":"high","score":8.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.65"],"url":"https://insights.sbomify.com/CVE-2026-116794/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-93657","aliases":["GHSA-5j98-2g5x-46v6"],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures","severity":"high","score":7.5,"package":"hickory-resolver","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.25.2","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-93657/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-93657","aliases":["GHSA-5j98-2g5x-46v6"],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures","severity":"high","score":7.5,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-93657/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102823","aliases":["GHSA-47hw-gvq5-r2gm"],"summary":"russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened","severity":"high","score":7.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.63.1"],"url":"https://insights.sbomify.com/CVE-2026-102823/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-42189","aliases":["GHSA-f5v4-2wr6-hqmg"],"summary":"russh has pre-auth DoS via unbounded allocation in its keyboard-interactive auth handler","severity":"high","score":7.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.60.1"],"url":"https://insights.sbomify.com/CVE-2026-42189/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-46673","aliases":["GHSA-g9f8-wqj9-fjw5","RUSTSEC-2026-0153","RUSTSEC-2026-0154"],"summary":"Unbounded 32-bit allocation","severity":"high","score":7.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.60.3"],"url":"https://insights.sbomify.com/CVE-2026-46673/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-46702","aliases":["GHSA-wwx6-x28x-8259"],"summary":"russh: Post-decompression SSH packet size was not bounded, allowing remote oversized compressed packets","severity":"high","score":7.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.61.1"],"url":"https://insights.sbomify.com/CVE-2026-46702/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-48110","aliases":["GHSA-4r3c-5hpg-58qr"],"summary":"Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds","severity":"high","score":7.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.61.0"],"url":"https://insights.sbomify.com/CVE-2026-48110/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-46673","aliases":["GHSA-g9f8-wqj9-fjw5","RUSTSEC-2026-0153","RUSTSEC-2026-0154"],"summary":"Unchecked `CryptoVec` allocation and growth handling","severity":"high","score":7.5,"package":"russh-cryptovec","version":"0.7.3","ecosystem":"crates.io","purl":"pkg:cargo/russh-cryptovec@0.7.3","fixed":["0.60.3"],"url":"https://insights.sbomify.com/CVE-2026-46673/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-123608","aliases":["GHSA-q2qq-hmj6-3wpp","RUSTSEC-2026-0119"],"summary":"CPU exhaustion during message encoding due to O(n²) name compression","severity":"medium","score":6.9,"package":"hickory-proto","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-proto@0.25.2","fixed":["0.26.1"],"url":"https://insights.sbomify.com/CVE-2026-123608/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-123585","aliases":["GHSA-6f2x-v7q7-m7m5"],"summary":"hickory-resolver follows irrelevant CNAME records","severity":"medium","score":6.9,"package":"hickory-resolver","version":"0.25.2","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.25.2","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123585/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-123585","aliases":["GHSA-6f2x-v7q7-m7m5"],"summary":"hickory-resolver follows irrelevant CNAME records","severity":"medium","score":6.9,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123585/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-119375","aliases":["GHSA-72w2-rjgg-q729","RUSTSEC-2026-0459"],"summary":"`libsqlite3-sys` via C SQLite CVE-2026-119375","severity":"medium","score":6.8,"package":"libsqlite3-sys","version":"0.30.1","ecosystem":"crates.io","purl":"pkg:cargo/libsqlite3-sys@0.30.1","fixed":["0.39.0"],"url":"https://insights.sbomify.com/CVE-2026-119375/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2025-54804","aliases":["GHSA-h5rc-j5f5-3gcm"],"summary":"russh is missing overflow checks during channel windows adjust","severity":"medium","score":6.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.54.1"],"url":"https://insights.sbomify.com/CVE-2025-54804/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102821","aliases":["GHSA-35g8-35p8-c8fw"],"summary":"Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey","severity":"medium","score":6.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.63.2"],"url":"https://insights.sbomify.com/CVE-2026-102821/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-48107","aliases":["GHSA-g9g7-5cgw-6v28"],"summary":"Russh: Unchecked keyboard-interactive prompt count in client auth path","severity":"medium","score":6.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.61.0"],"url":"https://insights.sbomify.com/CVE-2026-48107/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-68930","aliases":["GHSA-m65r-rprj-r5rg"],"summary":"Russh: Channel-scoped server callbacks can be reached without an open channel","severity":"medium","score":6.5,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.62.5"],"url":"https://insights.sbomify.com/CVE-2026-68930/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102820","aliases":["GHSA-g4mp-vgx3-xrvm"],"summary":"pageant: Out-of-bounds read / oversized allocation in `pageant` MemoryMap::read via a malicious Pageant agent (Windows)","severity":"medium","score":6.2,"package":"pageant","version":"0.0.1","ecosystem":"crates.io","purl":"pkg:cargo/pageant@0.0.1","fixed":["0.2.3"],"url":"https://insights.sbomify.com/CVE-2026-102820/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.10.0-rc.18","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.10.0-rc.18","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.10","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-46705","aliases":["GHSA-hpv4-5h6f-wqr3"],"summary":"russh server userauth state is not reset when authentication principal changes","severity":"medium","score":5.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.61.0"],"url":"https://insights.sbomify.com/CVE-2026-46705/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-48108","aliases":["GHSA-76r6-x97p-67vr"],"summary":"Russh: SSH identification parsing accepted non-canonical client banners and did not bound pre-banner input","severity":"medium","score":5.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.61.0"],"url":"https://insights.sbomify.com/CVE-2026-48108/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-73429","aliases":["GHSA-g9hv-x236-4qp3"],"summary":"Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)","severity":"medium","score":5.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.62.4"],"url":"https://insights.sbomify.com/CVE-2026-73429/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-73430","aliases":["GHSA-5xvq-cp9x-6p6r"],"summary":"Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)","severity":"medium","score":5.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.62.4"],"url":"https://insights.sbomify.com/CVE-2026-73430/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102824","aliases":["GHSA-w3jg-pjxf-73p4"],"summary":"Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange","severity":"medium","score":4.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.63.0"],"url":"https://insights.sbomify.com/CVE-2026-102824/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-111061","aliases":["GHSA-4wc5-f2rc-q74m"],"summary":"russh: Unbounded memory allocation in agent protocol server via crafted constraint records","severity":"medium","score":4.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.64.1"],"url":"https://insights.sbomify.com/CVE-2026-111061/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-116773","aliases":["GHSA-4p9f-7p9m-5vfg"],"summary":"russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets","severity":"medium","score":4.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.65"],"url":"https://insights.sbomify.com/CVE-2026-116773/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-73489","aliases":["GHSA-cqjc-rmpq-xprq"],"summary":"Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records","severity":"medium","score":4.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.62.4"],"url":"https://insights.sbomify.com/CVE-2026-73489/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102822","aliases":["GHSA-p8qx-h547-fjw9"],"summary":"russh: negotiating a MAC-requiring block cipher (CTR/CBC) with mac=none causes a slice-index-out-of-range panic","severity":"low","score":3.7,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.63.1"],"url":"https://insights.sbomify.com/CVE-2026-102822/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-102825","aliases":["GHSA-g6xm-f9xp-qq35"],"summary":"Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path","severity":"low","score":3.7,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.62.6"],"url":"https://insights.sbomify.com/CVE-2026-102825/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-116696","aliases":["GHSA-9wfm-jcj8-jfv9"],"summary":"russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages","severity":"low","score":3.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.65.0"],"url":"https://insights.sbomify.com/CVE-2026-116696/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-111062","aliases":["GHSA-j7h2-66j4-ghjf"],"summary":"A russh SSH server accepts a publickey authentication whose signature uses a different algorithm than the one named in the request","severity":"low","score":2.3,"package":"russh","version":"0.46.0","ecosystem":"crates.io","purl":"pkg:cargo/russh@0.46.0","fixed":["0.64.0"],"url":"https://insights.sbomify.com/CVE-2026-111062/","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0052","aliases":[],"summary":"async-std has been discontinued","severity":"unknown","score":null,"package":"async-std","version":"1.13.2","ecosystem":"crates.io","purl":"pkg:cargo/async-std@1.13.2","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0052","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2023-0089","aliases":[],"summary":"atomic-polyfill is unmaintained","severity":"unknown","score":null,"package":"atomic-polyfill","version":"1.0.3","ecosystem":"crates.io","purl":"pkg:cargo/atomic-polyfill@1.0.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2023-0089","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.7.3","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.7.3","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.7.46","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.46","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.25.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_10_12_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-macosx_11_0_arm64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_aarch64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-manylinux_2_28_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-musllinux_1_2_x86_64.whl","keeper_pam_webrtc_rs-2.2.13-cp38-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":11,"medium":19,"low":4,"unknown":10}}}