{"url":"https://pypi.sbomify.com/package/mdfr/0.8.3","markdown_url":"https://pypi.sbomify.com/package/mdfr/0.8.3.md","name":"mdfr","version":"0.8.3","purl":"pkg:pypi/mdfr@0.8.3","summary":"ASAM mdf file reader and writer in Rust using Arrow","author":null,"project_urls":{"Homepage":"https://github.com/ratal/mdfr"},"requires_python":">=3.10","license":null,"classifiers":[],"wheels":[{"filename":"mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/65/36/8907fb61cfbde61df006a2f2a6a2d609ef7206ff1e369b09957d6be22f3b/mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"cbea0a5c-a3b4-547a-b26f-c264c51484d9","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cbea0a5c-a3b4-547a-b26f-c264c51484d9/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/40/4f/2c6813247c0d0a6a65693e8787df069ed868477612072329058bfd6f0680/mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"3ed7a7b8-ac92-55d7-baf6-83be11677338","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3ed7a7b8-ac92-55d7-baf6-83be11677338/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/b0/d0/51635499421b8b76d625b485aa7b3f1b0ee35bd8e19400cb104f953f3953/mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"8cf45cfb-b567-5203-89c2-1d2592eb92a1","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8cf45cfb-b567-5203-89c2-1d2592eb92a1/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f5/9d/cb8de0193eb2aabf69b76b235972a6584309fc1f987a86bd50855a003210/mdfr-0.8.3-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"b48c93e2-332a-5956-b4e5-be05dcc7cf6d","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b48c93e2-332a-5956-b4e5-be05dcc7cf6d/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/f1/6a/0a770f32a003b9bd5260b70c3bbf05aca42e6244d1ccc68e78e9ca5383d7/mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"47df3a21-f09a-5246-9f92-51be025f3fb6","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/47df3a21-f09a-5246-9f92-51be025f3fb6/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/60/fd/0b66f2d19ad044e6119b2a02afb093e8d90c5256d06721d0acc736ca3fa1/mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"b3ee04c5-614f-5ea2-860b-d206f2458bce","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b3ee04c5-614f-5ea2-860b-d206f2458bce/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/a8/4e/7476899903a125737141b09eaa716bf755bcf95ea9fcec98fce82946ff6c/mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"12642973-c52b-5901-8840-20c4fb0551fd","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/12642973-c52b-5901-8840-20c4fb0551fd/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/d7/92/1c817e52852de94bb718791b0674ce699834c4a1aa5039a3768ae1937494/mdfr-0.8.3-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"8cd64ff5-a47f-5aa8-954e-6a07f3be7026","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8cd64ff5-a47f-5aa8-954e-6a07f3be7026/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/fd/f1/fe9add63c0a6834d6220443225b1b126703d1f669f7c1ab4851a6dd2cc14/mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"564b31f9-1d7b-5a29-bc6c-fbfcdeac593b","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/564b31f9-1d7b-5a29-bc6c-fbfcdeac593b/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/f4/0c/882670ee1c145de7245588587b374a0feeb63e4abb78f5f4d09a97bc16ca/mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"f6c35037-c101-528a-a629-778aace5ed4e","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f6c35037-c101-528a-a629-778aace5ed4e/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/56/cc/f4e998750a34e78c3fd245d5ab6d997f801ee6e879cff1687cfd09e8b4ca/mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"03e2160c-358b-5964-8c83-382899377d72","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/03e2160c-358b-5964-8c83-382899377d72/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/23/39/d23ceb047becb585095057417233d928db435c63ff094fbe49245f5b84f2/mdfr-0.8.3-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"445930ad-c46f-5331-b88a-1a0951e01fbc","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/445930ad-c46f-5331-b88a-1a0951e01fbc/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/45/e9/c4ad47d99a6e03e76c5ff3101be0830879e6348bd679185daae6104e7444/mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0c1989a1-1a94-513f-a6e4-13f1ce006252","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0c1989a1-1a94-513f-a6e4-13f1ce006252/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/31/71/8274406646f48876832ca9ad5691db53e1829e69ba00722d2f0373336bef/mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"4bed0ae5-bea0-5158-95d2-1e35b7753565","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4bed0ae5-bea0-5158-95d2-1e35b7753565/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/d5/84/5a148a51404c6f62e004f814fc27a442eff7ad0f78e1292d2aea9d45f508/mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"5cb0c752-9274-5b93-a662-7bfc39f595dc","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5cb0c752-9274-5b93-a662-7bfc39f595dc/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/1f/ca/699c65d41e1004162ed338ad8d31b0340b38aac4aaa55971986c44dd6e0b/mdfr-0.8.3-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"0c879101-07ec-5753-aa91-f0cad452e90c","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0c879101-07ec-5753-aa91-f0cad452e90c/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/06/56/2b26289c84784a797855947312bf89151a93cb709a1af2e6a7edef2fe132/mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"353d2ef1-53bc-58c7-b9cb-0e1d7bfbb612","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/353d2ef1-53bc-58c7-b9cb-0e1d7bfbb612/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/8c/9f/f010dbc4f684865f5bd524b75a71da2133ea4e2c9aacab78a3c63c7a2748/mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"fa01a33e-868b-58c2-9027-f074604fb41a","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fa01a33e-868b-58c2-9027-f074604fb41a/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/85/e0/64283a86281109834b96a23ed3de514cfd1edd57078baffaedb6e732fc8a/mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"03c9b823-e1dc-5df8-89d8-c6b2893dc944","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/03c9b823-e1dc-5df8-89d8-c6b2893dc944/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mdfr-0.8.3-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/81/dd/56b81267e5d74f0401c7a2845171fdb23307e0be190b7541f3ac402d10ab/mdfr-0.8.3-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"380f1490-d457-52c9-9a85-305b4f4381a7","path":"mdfr-0.8.3.dist-info/sboms/mdfr.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/380f1490-d457-52c9-9a85-305b4f4381a7/download","vulnerability_count":34,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":20,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"GHSA-qwgh-2vcv-g2f7","aliases":[],"summary":"block_buffer: panic corrupts inline buffer position","severity":"medium","score":6.3,"package":"block-buffer","version":"0.12.0","ecosystem":"crates.io","purl":"pkg:cargo/block-buffer@0.12.0","fixed":[],"url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"GHSA-6g2r-675j-hx59","aliases":[],"summary":"xxhash-rust: Safe xxh3 custom-secret API accepts too-short secret in release","severity":"low","score":2.3,"package":"xxhash-rust","version":"0.8.15","ecosystem":"crates.io","purl":"pkg:cargo/xxhash-rust@0.8.15","fixed":["0.8.16"],"url":"https://osv.dev/vulnerability/GHSA-6g2r-675j-hx59","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"60.0.0","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@60.0.0","fixed":["60.1.0"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.14","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.14","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.10","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["mdfr-0.8.3-cp310-cp310-macosx_11_0_arm64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp310-cp310-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp310-cp310-win_amd64.whl","mdfr-0.8.3-cp311-cp311-macosx_11_0_arm64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp311-cp311-win_amd64.whl","mdfr-0.8.3-cp312-cp312-macosx_11_0_arm64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp312-cp312-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp312-cp312-win_amd64.whl","mdfr-0.8.3-cp313-cp313-macosx_11_0_arm64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp313-cp313-win_amd64.whl","mdfr-0.8.3-cp314-cp314-macosx_11_0_arm64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","mdfr-0.8.3-cp314-cp314-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mdfr-0.8.3-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":20,"total_sboms":20,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":4,"medium":3,"low":3,"unknown":24}}}