{"url":"https://pypi.sbomify.com/package/kohakuvault/1.1.0","markdown_url":"https://pypi.sbomify.com/package/kohakuvault/1.1.0.md","name":"kohakuvault","version":"1.1.0","purl":"pkg:pypi/kohakuvault@1.1.0","summary":"SQLite-backed KV store (Rust+PyO3) with vector search, auto-packing, and efficient array storage","author":"KohakuVault Contributors","project_urls":{},"requires_python":">=3.10","license":"Apache-2.0","classifiers":["License :: OSI Approved :: Apache Software License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Rust","Topic :: Database","Topic :: Software Development :: Libraries :: Python Modules"],"wheels":[{"filename":"kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","url":"https://files.pythonhosted.org/packages/83/e0/05c4e07ca23940bd3bc22fa8fddb8a003e6c4a0caffc00494ed4d01cb4b9/kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","sboms":[{"artifact_uuid":"d997e2be-1508-5154-9ef8-05249bc4956f","path":"kohakuvault-1.1.0.dist-info/sboms/kohakuvault.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d997e2be-1508-5154-9ef8-05249bc4956f/download","vulnerability_count":10,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"KohakuBlueleaf/KohakuVault","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/KohakuBlueleaf/KohakuVault/.github/workflows/release.yml@refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.10":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/KohakuBlueleaf/KohakuVault","1.3.6.1.4.1.57264.1.13":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.15":"1087204015","1.3.6.1.4.1.57264.1.16":"https://github.com/KohakuBlueleaf","1.3.6.1.4.1.57264.1.17":"59680068","1.3.6.1.4.1.57264.1.18":"https://github.com/KohakuBlueleaf/KohakuVault/.github/workflows/release.yml@refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.19":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/KohakuBlueleaf/KohakuVault/actions/runs/40210795017/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl","url":"https://files.pythonhosted.org/packages/3f/e5/50eec25d05260c396db37632fd2f712231af066f1ffe0125bce43234b62b/kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl","sboms":[{"artifact_uuid":"4f57a3b6-531d-5b7b-9c7e-84910e5fe3b7","path":"kohakuvault-1.1.0.dist-info/sboms/kohakuvault.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4f57a3b6-531d-5b7b-9c7e-84910e5fe3b7/download","vulnerability_count":10,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"KohakuBlueleaf/KohakuVault","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/KohakuBlueleaf/KohakuVault/.github/workflows/release.yml@refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.10":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/KohakuBlueleaf/KohakuVault","1.3.6.1.4.1.57264.1.13":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.15":"1087204015","1.3.6.1.4.1.57264.1.16":"https://github.com/KohakuBlueleaf","1.3.6.1.4.1.57264.1.17":"59680068","1.3.6.1.4.1.57264.1.18":"https://github.com/KohakuBlueleaf/KohakuVault/.github/workflows/release.yml@refs/tags/v1.1.0","1.3.6.1.4.1.57264.1.19":"c9e47c69f50f542b437a3c66cf2c7423fefd47e1","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/KohakuBlueleaf/KohakuVault/actions/runs/40210795017/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":2,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"CVE-2026-119375","aliases":["GHSA-72w2-rjgg-q729","RUSTSEC-2026-0459"],"summary":"`libsqlite3-sys` via C SQLite CVE-2026-119375","severity":"medium","score":6.8,"package":"libsqlite3-sys","version":"0.28.0","ecosystem":"crates.io","purl":"pkg:cargo/libsqlite3-sys@0.28.0","fixed":["0.39.0"],"url":"https://insights.sbomify.com/CVE-2026-119375/","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.44","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.44","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"CVE-2026-25541","aliases":["GHSA-434x-w66g-qw3r","RUSTSEC-2026-0007"],"summary":"Integer overflow in `BytesMut::reserve`","severity":"medium","score":5.5,"package":"bytes","version":"1.10.1","ecosystem":"crates.io","purl":"pkg:cargo/bytes@1.10.1","fixed":["1.11.1"],"url":"https://insights.sbomify.com/CVE-2026-25541/","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.48.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.48.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["kohakuvault-1.1.0-cp313-cp313-android_24_arm64_v8a.whl","kohakuvault-1.1.0-cp313-cp313-android_24_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":2,"total_sboms":2,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":4,"unknown":5}}}