{"url":"https://pypi.sbomify.com/package/libarx/0.4.2","markdown_url":"https://pypi.sbomify.com/package/libarx/0.4.2.md","name":"libarx","version":"0.4.2","purl":"pkg:pypi/libarx@0.4.2","summary":"Read and create arx archives.","author":null,"project_urls":{"Homepage":"https://github.com/jubako/arx"},"requires_python":">=3.8","license":null,"classifiers":["License :: OSI Approved :: MIT License","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/54/91/43a34720f51f4138fddc3dd7eb906a988b377d9e2662e048510aab874200/libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"13d95c93-8cad-5f95-ab1e-9c5d50eb0f54","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/13d95c93-8cad-5f95-ab1e-9c5d50eb0f54/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/6d/2f/852f2e907beaac66c1ddf3b6e68ec1a9c404965e479e889f9d1951627362/libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"ff3255cb-4a86-5bc0-8a42-dd3f77beb1c4","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ff3255cb-4a86-5bc0-8a42-dd3f77beb1c4/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7e/1b/1a142ecab65e5b9b859ce9ca56b5b97cbdc811fa3ec95adb04312572b183/libarx-0.4.2-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"673aa9de-00f6-5fc8-82ba-ebfe4c3e701b","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/673aa9de-00f6-5fc8-82ba-ebfe4c3e701b/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/5a/00/3cab3a9dcfd51bd1b18360e043a5f95962e295f21bb679a3c048f9c12038/libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"cf023b97-a6a2-59a8-9f2e-e8e98aa44a07","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cf023b97-a6a2-59a8-9f2e-e8e98aa44a07/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/ee/05/36fad3fa250b19ffb803128c965af7be97a85ee51880560fe8eded7a4bce/libarx-0.4.2-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"cb9d1035-e536-51e0-88de-44514dcdb270","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cb9d1035-e536-51e0-88de-44514dcdb270/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/7a/21/2e9d8bba626ed7df138e3c39da99f80a2c3709db8b982ecb829f51be037d/libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"f9ac277f-6381-506c-a4e1-9e6598585e4f","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f9ac277f-6381-506c-a4e1-9e6598585e4f/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","url":"https://files.pythonhosted.org/packages/35/2c/c321b42fc915245dc68138beb94ea42dbbe5d770c2d9b4f525483a902ea7/libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","sboms":[{"artifact_uuid":"49821bdd-f959-56af-8011-eb620246d712","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/49821bdd-f959-56af-8011-eb620246d712/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/5b/6e/521f589eb772a5e049781605a11102815be9c95ef699aacb3d934dd1dcd8/libarx-0.4.2-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"878f42fc-37c1-5e73-853f-b75113bc7ccd","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/878f42fc-37c1-5e73-853f-b75113bc7ccd/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/db/e7/7d1e292128772c868ea4455a1783d00e15e806dfd57bc7e6fa0cdcfde20f/libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"dc19c89f-b6b9-5cf6-904d-56c3a1c552af","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dc19c89f-b6b9-5cf6-904d-56c3a1c552af/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7d/a7/0c8edec195b0da2f90e327c9ee16611515e91870f9ec48396414b71ec64e/libarx-0.4.2-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"f8d09dca-c962-5706-b9f4-feb6cc979d03","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f8d09dca-c962-5706-b9f4-feb6cc979d03/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d4/04/ecb8c552f619c8c946fd0da497da565d73aa26d302569395355a7e81140f/libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"f92e12ba-84cd-5509-92ef-34fe682fb07c","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f92e12ba-84cd-5509-92ef-34fe682fb07c/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"libarx-0.4.2-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7c/e6/e2859fc9bb68f39622405a8dbf0fdd4af803d373bc448710d2812455ec82/libarx-0.4.2-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"6862b050-4692-58e3-b66e-5a8fca2d3258","path":"libarx-0.4.2.dist-info/sboms/python-libarx.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6862b050-4692-58e3-b66e-5a8fca2d3258/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.27.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.27.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.27.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0002","aliases":["GHSA-rhfx-m35p-ff5j"],"summary":"`IterMut` violates Stacked Borrows by invalidating internal pointer","severity":"low","score":2.7,"package":"lru","version":"0.16.2","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.2","fixed":["0.16.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0002","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0057","aliases":[],"summary":"fxhash - no longer maintained","severity":"unknown","score":null,"package":"fxhash","version":"0.2.1","ecosystem":"crates.io","purl":"pkg:cargo/fxhash@0.2.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0057","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.2","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.2","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.9","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.9","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["libarx-0.4.2-cp310-cp310-macosx_11_0_arm64.whl","libarx-0.4.2-cp310-cp310-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp310-cp310-win_amd64.whl","libarx-0.4.2-cp311-cp311-macosx_11_0_arm64.whl","libarx-0.4.2-cp311-cp311-win_amd64.whl","libarx-0.4.2-cp312-cp312-macosx_11_0_arm64.whl","libarx-0.4.2-cp312-cp312-manylinux_2_34_x86_64.whl","libarx-0.4.2-cp312-cp312-win_amd64.whl","libarx-0.4.2-cp313-cp313-macosx_11_0_arm64.whl","libarx-0.4.2-cp313-cp313-win_amd64.whl","libarx-0.4.2-cp314-cp314-macosx_11_0_arm64.whl","libarx-0.4.2-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1,"unknown":18}}}