{"url":"https://pypi.sbomify.com/package/microsandbox/0.7.13","markdown_url":"https://pypi.sbomify.com/package/microsandbox/0.7.13.md","name":"microsandbox","version":"0.7.13","purl":"pkg:pypi/microsandbox@0.7.13","summary":"Python SDK for microsandbox — secure, fast microVM-based sandboxing.","author":null,"project_urls":{"Documentation":"https://docs.microsandbox.dev","Homepage":"https://github.com/superradcompany/microsandbox","Issues":"https://github.com/superradcompany/microsandbox/issues","Repository":"https://github.com/superradcompany/microsandbox"},"requires_python":">=3.10","license":"Apache-2.0","classifiers":["Development Status :: 4 - Beta","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Rust","Topic :: Security","Topic :: Software Development :: Libraries","Typing :: Typed"],"wheels":[{"filename":"microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","url":"https://files.pythonhosted.org/packages/c6/6b/495350ebd2ac529b16385e0bb824b2501bcf25bc99484916bdbdb50a2420/microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","sboms":[{"artifact_uuid":"f494d7ad-b3c6-57bf-95a6-d189e8b77825","path":"microsandbox-0.7.13.dist-info/sboms/microsandbox-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f494d7ad-b3c6-57bf-95a6-d189e8b77825/download","vulnerability_count":47,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/8f/a0/456fda5079e622bec163cac55f9315e42e30ddb0d51a7e525edaa2d493fa/microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"28710308-9d6a-5870-84f9-d961f93e1f65","path":"microsandbox-0.7.13.dist-info/sboms/microsandbox-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/28710308-9d6a-5870-84f9-d961f93e1f65/download","vulnerability_count":47,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/33/b7/87c5eeffd8180ae095a274e539de31abc584de2f45720381d68e26506a95/microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"6417d196-6f9f-5576-a6f2-281929369fc4","path":"microsandbox-0.7.13.dist-info/sboms/microsandbox-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6417d196-6f9f-5576-a6f2-281929369fc4/download","vulnerability_count":47,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"microsandbox-0.7.13-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/d9/88/44499a687a1327df674e72f0caa425d3831c53144c4e501955fe2335d269/microsandbox-0.7.13-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"c5906611-c34b-5cf7-8b42-1d480e60ed3d","path":"microsandbox-0.7.13.dist-info/sboms/microsandbox-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c5906611-c34b-5cf7-8b42-1d480e60ed3d/download","vulnerability_count":44,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"microsandbox-0.7.13-cp310-abi3-win_arm64.whl","url":"https://files.pythonhosted.org/packages/14/9b/1b5a5e966161b9fa0f93cfbb5b10fb2fedf85c13c6a08eaa5fc31df25da5/microsandbox-0.7.13-cp310-abi3-win_arm64.whl","sboms":[{"artifact_uuid":"1534399d-3f0d-5036-8b0d-de859d1306bb","path":"microsandbox-0.7.13.dist-info/sboms/microsandbox-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1534399d-3f0d-5036-8b0d-de859d1306bb/download","vulnerability_count":31,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"CVE-2026-119375","aliases":["GHSA-72w2-rjgg-q729","RUSTSEC-2026-0459"],"summary":"`libsqlite3-sys` via C SQLite CVE-2026-119375","severity":"medium","score":6.8,"package":"libsqlite3-sys","version":"0.30.1","ecosystem":"crates.io","purl":"pkg:cargo/libsqlite3-sys@0.30.1","fixed":["0.39.0"],"url":"https://insights.sbomify.com/CVE-2026-119375/","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"GHSA-qwgh-2vcv-g2f7","aliases":[],"summary":"block_buffer: panic corrupts inline buffer position","severity":"medium","score":6.3,"package":"block-buffer","version":"0.12.0","ecosystem":"crates.io","purl":"pkg:cargo/block-buffer@0.12.0","fixed":[],"url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.10.0-rc.18","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.10.0-rc.18","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"CVE-2026-116775","aliases":["GHSA-662x-8wvj-2276"],"summary":"pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)","severity":"low","score":2.3,"package":"pageant","version":"0.2.3","ecosystem":"crates.io","purl":"pkg:cargo/pageant@0.2.3","fixed":["0.2.5"],"url":"https://insights.sbomify.com/CVE-2026-116775/","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"57.3.1","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@57.3.1","fixed":["57.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0440","aliases":[],"summary":"`astral-tokio-tar` is unmaintained","severity":"unknown","score":null,"package":"astral-tokio-tar","version":"0.6.4","ecosystem":"crates.io","purl":"pkg:cargo/astral-tokio-tar@0.6.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0440","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.7.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.7.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0385","aliases":[],"summary":"Non-constant-time mask generation and `u128` comparisons","severity":"unknown","score":null,"package":"ctutils","version":"0.4.2","ecosystem":"crates.io","purl":"pkg:cargo/ctutils@0.4.2","fixed":["0.4.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0385","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0173","aliases":[],"summary":"proc-macro-error2 is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error2","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error2@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0173","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0235","aliases":[],"summary":"Insufficient archive validation can cause out-of-bounds reads in archives containing Rc/Arc","severity":"unknown","score":null,"package":"rkyv","version":"0.7.46","ecosystem":"crates.io","purl":"pkg:cargo/rkyv@0.7.46","fixed":["0.8.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0235","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0371","aliases":[],"summary":"`zbus_names` is unmaintained","severity":"unknown","score":null,"package":"zbus_names","version":"3.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zbus_names@3.0.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0371","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.14.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.14.0","fixed":["0.13.4","0.14.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"8.0.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@8.0.0","fixed":["7.4.0","8.2.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.1.0+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.1.0%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl","microsandbox-0.7.13-cp310-abi3-win_amd64.whl","microsandbox-0.7.13-cp310-abi3-win_arm64.whl"]},{"id":"RUSTSEC-2026-0370","aliases":[],"summary":"`zvariant` is unmaintained","severity":"unknown","score":null,"package":"zvariant","version":"4.2.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant@4.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0370","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0372","aliases":[],"summary":"`zvariant_derive` is unmaintained","severity":"unknown","score":null,"package":"zvariant_derive","version":"4.2.0","ecosystem":"crates.io","purl":"pkg:cargo/zvariant_derive@4.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0372","wheels":["microsandbox-0.7.13-cp310-abi3-macosx_14_0_arm64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_aarch64.whl","microsandbox-0.7.13-cp310-abi3-manylinux_2_28_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":3,"low":1,"unknown":41}}}