{"url":"https://pypi.sbomify.com/package/maturin/1.16.0","markdown_url":"https://pypi.sbomify.com/package/maturin/1.16.0.md","name":"maturin","version":"1.16.0","purl":"pkg:pypi/maturin@1.16.0","summary":"Build and publish crates with pyo3, cffi and uniffi bindings as well as rust binaries as python packages","author":null,"project_urls":{"Changelog":"https://maturin.rs/changelog.html","Documentation":"https://maturin.rs","Homepage":"https://github.com/pyo3/maturin","Issues":"https://github.com/PyO3/maturin/issues","Source Code":"https://github.com/PyO3/maturin"},"requires_python":">=3.7","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: GraalPy","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust","Topic :: Software Development :: Build Tools"],"wheels":[{"filename":"maturin-1.16.0-py3-none-linux_armv6l.whl","url":"https://files.pythonhosted.org/packages/c0/f8/235d4a8b3d61af3c7744582ae9e6ccb8f096e9f68f06fe62d7d03e5d7b2d/maturin-1.16.0-py3-none-linux_armv6l.whl","sboms":[{"artifact_uuid":"4db0ce70-5c0f-51e6-bc54-df4a818d66d0","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4db0ce70-5c0f-51e6-bc54-df4a818d66d0/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/fb/d5/f49a90d8c489dc5f134654ec91d12a78a51599fdc8c2b5a1bc2391bca0ac/maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"d47a17c8-fbb6-578a-9dd2-2143d7546de1","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d47a17c8-fbb6-578a-9dd2-2143d7546de1/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/d2/8e/d65633d7c25484cb82735a51e15bc969f9874a13557e2b352d27df574c20/maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"12bba1e7-8de7-51d1-b683-83aa2744a867","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/12bba1e7-8de7-51d1-b683-83aa2744a867/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","url":"https://files.pythonhosted.org/packages/0a/dc/e77f490557cb5e045a75c3d18a7965425ac576235c970dfff4d903eb2c74/maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","sboms":[{"artifact_uuid":"753f640a-d79d-5298-bb4e-21af3137cd7a","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/753f640a-d79d-5298-bb4e-21af3137cd7a/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","url":"https://files.pythonhosted.org/packages/fa/eb/535564a4211105fd64611fa4f9437c8925eded26a97d58de84565f5aebfa/maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","sboms":[{"artifact_uuid":"3861665a-afbe-57f6-8ad6-5773eab26b2b","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3861665a-afbe-57f6-8ad6-5773eab26b2b/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","url":"https://files.pythonhosted.org/packages/45/5b/570e13ce81f103be6609c067a06c5bac08da5af0cf7ea700c9ae43419be9/maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","sboms":[{"artifact_uuid":"c27fc92b-c7d4-5b3e-bb62-43cf44967230","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c27fc92b-c7d4-5b3e-bb62-43cf44967230/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","url":"https://files.pythonhosted.org/packages/88/a6/26b40c31c354359fe4e49398113d018694c7035968fe1b569bb13c3905af/maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","sboms":[{"artifact_uuid":"f1f2d303-3f9c-5327-b8ce-c2b10a52852a","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f1f2d303-3f9c-5327-b8ce-c2b10a52852a/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","url":"https://files.pythonhosted.org/packages/2b/19/faca1784d917c2eecd498648dff6a0179b299c8142cc448ea5b1183545ec/maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","sboms":[{"artifact_uuid":"5c6d877e-b9ff-50e2-ba58-579710cd3fdf","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5c6d877e-b9ff-50e2-ba58-579710cd3fdf/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","url":"https://files.pythonhosted.org/packages/36/c1/d67e77aa07100e3b2d4c0d9ef6922646d9c4bab25cc04f91023aefc72418/maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","sboms":[{"artifact_uuid":"41ef5a11-3fae-5ce6-9a11-e95ef3ca2fbc","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/41ef5a11-3fae-5ce6-9a11-e95ef3ca2fbc/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","url":"https://files.pythonhosted.org/packages/76/44/ccef52f02ab0e1f7258bc8fe0140b4991c6287458ef883af1027f946a253/maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","sboms":[{"artifact_uuid":"cfb4a640-2574-584a-a913-31927a4013e2","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cfb4a640-2574-584a-a913-31927a4013e2/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-win32.whl","url":"https://files.pythonhosted.org/packages/6e/9b/3104f62dbb428f9e26e35cba2c80cfc42ba9bb1dc4968882c19d1bfe594b/maturin-1.16.0-py3-none-win32.whl","sboms":[{"artifact_uuid":"5bce735d-a437-5b8d-96f2-5d7e0f7e075e","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5bce735d-a437-5b8d-96f2-5d7e0f7e075e/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/63/b8/c25ce706c4797ee1663bcf1f386ffe91d8a3b3589700a135a204b49bc4b0/maturin-1.16.0-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"d0f59758-c209-5d09-8855-11d4e538c45e","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d0f59758-c209-5d09-8855-11d4e538c45e/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"maturin-1.16.0-py3-none-win_arm64.whl","url":"https://files.pythonhosted.org/packages/eb/74/f69aba8b22539e5ed58323d4a6ee974afd9edda238489c73926cc0fc9d51/maturin-1.16.0-py3-none-win_arm64.whl","sboms":[{"artifact_uuid":"3a4a758e-7777-55dc-84f7-64cbf679fbac","path":"maturin-1.16.0.dist-info/sboms/maturin.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3a4a758e-7777-55dc-84f7-64cbf679fbac/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"PyO3/maturin","workflow":"release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.10":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/PyO3/maturin","1.3.6.1.4.1.57264.1.13":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.15":"141846986","1.3.6.1.4.1.57264.1.16":"https://github.com/PyO3","1.3.6.1.4.1.57264.1.17":"28156855","1.3.6.1.4.1.57264.1.18":"https://github.com/PyO3/maturin/.github/workflows/release.yml@refs/tags/v1.16.0","1.3.6.1.4.1.57264.1.19":"3bec0a32ae2b67ad4fac0194f762f44141e51473","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/PyO3/maturin/actions/runs/40885253298/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":13,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0344","aliases":[],"summary":"Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)","severity":"high","score":7.5,"package":"ruzstd","version":"0.8.2","ecosystem":"crates.io","purl":"pkg:cargo/ruzstd@0.8.2","fixed":["0.9.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0344","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"CVE-2026-115908","aliases":["GHSA-hjqx-j4rw-g7xv"],"summary":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. ","severity":"high","score":7.4,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115908/","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"GHSA-qwgh-2vcv-g2f7","aliases":[],"summary":"block_buffer: panic corrupts inline buffer position","severity":"medium","score":6.3,"package":"block-buffer","version":"0.12.0","ecosystem":"crates.io","purl":"pkg:cargo/block-buffer@0.12.0","fixed":[],"url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["maturin-1.16.0-py3-none-linux_armv6l.whl","maturin-1.16.0-py3-none-macosx_10_12_universal2.macosx_10_12_x86_64.macosx_11_0_arm64.whl","maturin-1.16.0-py3-none-macosx_10_12_x86_64.whl","maturin-1.16.0-py3-none-manylinux2010_x86_64.manylinux_2_12_x86_64.musllinux_1_1_x86_64.whl","maturin-1.16.0-py3-none-manylinux_2_12_i686.manylinux2010_i686.musllinux_1_1_i686.whl","maturin-1.16.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.musllinux_1_1_aarch64.whl","maturin-1.16.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.musllinux_1_1_armv7l.whl","maturin-1.16.0-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.musllinux_1_1_ppc64le.whl","maturin-1.16.0-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl","maturin-1.16.0-py3-none-manylinux_2_31_riscv64.musllinux_1_1_riscv64.whl","maturin-1.16.0-py3-none-win32.whl","maturin-1.16.0-py3-none-win_amd64.whl","maturin-1.16.0-py3-none-win_arm64.whl"]}],"vulnerability_scan":{"scanned_sboms":13,"total_sboms":13,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":5,"medium":2,"unknown":2}}}