{"url":"https://pypi.sbomify.com/package/listen2-rust/3.0.6","markdown_url":"https://pypi.sbomify.com/package/listen2-rust/3.0.6.md","name":"listen2-rust","version":"3.0.6","purl":"pkg:pypi/listen2-rust@3.0.6","summary":null,"author":null,"project_urls":{},"requires_python":">=3.8","license":null,"classifiers":[],"wheels":[{"filename":"listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl","url":"https://files.pythonhosted.org/packages/f4/de/ede0239c37dc3f6d027071a5a3c50deeef49e7cbe886e2dc3a6e0565aa30/listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl","sboms":[{"artifact_uuid":"c87a3947-e8a1-53c3-9271-2e0ec933c68e","path":"listen2_rust-3.0.6.dist-info/sboms/listen2_rust.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c87a3947-e8a1-53c3-9271-2e0ec933c68e/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":1,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-42327","aliases":["GHSA-xp3w-r5p5-63rr"],"summary":"rust-openssl has undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs","severity":"high","score":8.7,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-42327/","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"CVE-2026-44662","aliases":["GHSA-xv59-967r-8726"],"summary":"rust-openssl vulnerable to heap buffer overflow when encrypting with AES key-wrap-with-padding","severity":"medium","score":5.1,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.79"],"url":"https://insights.sbomify.com/CVE-2026-44662/","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"CVE-2026-45784","aliases":["GHSA-phqj-4mhp-q6mq"],"summary":"rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers","severity":"medium","score":5.1,"package":"openssl","version":"0.10.78","ecosystem":"crates.io","purl":"pkg:cargo/openssl@0.10.78","fixed":["0.10.80"],"url":"https://insights.sbomify.com/CVE-2026-45784/","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2026-0002","aliases":["GHSA-rhfx-m35p-ff5j"],"summary":"`IterMut` violates Stacked Borrows by invalidating internal pointer","severity":"low","score":2.7,"package":"lru","version":"0.12.5","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.12.5","fixed":["0.16.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0002","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.28","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.28","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.12.5","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.12.5","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]},{"id":"RUSTSEC-2026-0173","aliases":[],"summary":"proc-macro-error2 is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error2","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error2@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0173","wheels":["listen2_rust-3.0.6-cp314-cp314-manylinux_2_31_aarch64.whl"]}],"vulnerability_scan":{"scanned_sboms":1,"total_sboms":1,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":2,"low":1,"unknown":5}}}