{"url":"https://pypi.sbomify.com/package/mergify-cli/2026.11.5","markdown_url":"https://pypi.sbomify.com/package/mergify-cli/2026.11.5.md","name":"mergify-cli","version":"2026.11.5","purl":"pkg:pypi/mergify-cli@2026.11.5","summary":"Mergify CLI is a tool that automates the creation and management of stacked pull requests on GitHub and handles CI results upload","author":null,"project_urls":{"Changelog":"https://github.com/Mergifyio/mergify-cli/releases","Documentation":"https://docs.mergify.com","Homepage":"https://mergify.com","Issues":"https://github.com/Mergifyio/mergify-cli/issues","Repository":"https://github.com/Mergifyio/mergify-cli"},"requires_python":">=3.10","license":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Programming Language :: Rust","Topic :: Software Development :: Version Control :: Git"],"wheels":[{"filename":"mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/ec/57/5836ca0379fdd9cd402b14345700aa00dc2e6a8b525e67fcff78a3b8a909/mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"9fabbb4b-9e65-58ce-9101-ec335128cd4e","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9fabbb4b-9e65-58ce-9101-ec335128cd4e/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/36/a0/a82c6dd7b2b563d5ce6fda621b31038f0f5910923ad76d5eb4078b25934e/mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8c163b4a-9bbc-5f36-a49a-654f328e624a","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8c163b4a-9bbc-5f36-a49a-654f328e624a/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/f8/40/f8cdb0609cff31101a7ba9536d669494356e68cc848acd5fe1a1eb858bd9/mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"16f30743-c351-517b-95e0-b82d028c8cc9","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/16f30743-c351-517b-95e0-b82d028c8cc9/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/37/c2/4f203803a29b019a90598a0fb971fd1de871353e10d805174941726abc22/mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"944dfec7-ec23-50f9-b471-3eeaf6d5a888","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/944dfec7-ec23-50f9-b471-3eeaf6d5a888/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/8a/3f/50957c1ccb9700f744bc87db732c7ba839d977deb07fca100607b85eabba/mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"8c041832-7569-5a7c-b344-97ddd062021b","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8c041832-7569-5a7c-b344-97ddd062021b/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/09/c1/33b21c1c2b0813cfe6ae8f675981ecb4e8939005c373970db14976d11ae1/mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"42d952a6-a426-5f60-a583-39697aa1cfe1","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/42d952a6-a426-5f60-a583-39697aa1cfe1/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}},{"filename":"mergify_cli-2026.11.5-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/9a/33/de45a23b90e8286e23ef2a1c2d048272d71d2426ff45b080a02fb9f6003d/mergify_cli-2026.11.5-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"e50e3f48-a228-5797-bb96-e2502754623d","path":"mergify_cli-2026.11.5.dist-info/sboms/mergify-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e50e3f48-a228-5797-bb96-e2502754623d/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"Mergifyio/mergify-ci-integrations","workflow":"release-mergify-cli.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.10":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/Mergifyio/mergify-ci-integrations","1.3.6.1.4.1.57264.1.13":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.14":"refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.15":"1284071045","1.3.6.1.4.1.57264.1.16":"https://github.com/Mergifyio","1.3.6.1.4.1.57264.1.17":"37838584","1.3.6.1.4.1.57264.1.18":"https://github.com/Mergifyio/mergify-ci-integrations/.github/workflows/release-mergify-cli.yml@refs/tags/2026.11.5","1.3.6.1.4.1.57264.1.19":"4645423e60c136b04cd98f35eb41cbaf6aa20105","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/Mergifyio/mergify-ci-integrations/actions/runs/42228218882/attempts/1","1.3.6.1.4.1.57264.1.22":"private"}}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","mergify_cli-2026.11.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","mergify_cli-2026.11.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","mergify_cli-2026.11.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","mergify_cli-2026.11.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["mergify_cli-2026.11.5-py3-none-macosx_10_12_x86_64.whl","mergify_cli-2026.11.5-py3-none-macosx_11_0_arm64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl","mergify_cli-2026.11.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0371","aliases":[],"summary":"`zbus_names` is unmaintained","severity":"unknown","score":null,"package":"zbus_names","version":"4.3.4","ecosystem":"crates.io","purl":"pkg:cargo/zbus_names@4.3.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0371","wheels":["mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0370","aliases":[],"summary":"`zvariant` is unmaintained","severity":"unknown","score":null,"package":"zvariant","version":"5.15.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant@5.15.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0370","wheels":["mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0372","aliases":[],"summary":"`zvariant_derive` is unmaintained","severity":"unknown","score":null,"package":"zvariant_derive","version":"5.15.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant_derive@5.15.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0372","wheels":["mergify_cli-2026.11.5-py3-none-manylinux_2_28_aarch64.whl","mergify_cli-2026.11.5-py3-none-manylinux_2_28_x86_64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_aarch64.whl","mergify_cli-2026.11.5-py3-none-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"unknown":6}}}