{"url":"https://pypi.sbomify.com/package/mitmproxy-linux/0.12.15","markdown_url":"https://pypi.sbomify.com/package/mitmproxy-linux/0.12.15.md","name":"mitmproxy-linux","version":"0.12.15","purl":"pkg:pypi/mitmproxy-linux@0.12.15","summary":null,"author":null,"project_urls":{},"requires_python":">=3.12","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/62/31/538d49c2e4943fac02ae154967b7ed21a952c7650e5835e60e41ac69bab4/mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"ea853e28-2901-54d7-bad6-a3c2746ed575","path":"mitmproxy_linux-0.12.15.dist-info/sboms/mitmproxy-linux.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ea853e28-2901-54d7-bad6-a3c2746ed575/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/fa/ef/32bf79a030d7d0775c31d0c866d68030da386d738be284e8527c0ffa230e/mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"e6bde72c-c222-5111-b56a-710af2cadd27","path":"mitmproxy_linux-0.12.15.dist-info/sboms/mitmproxy-linux.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e6bde72c-c222-5111-b56a-710af2cadd27/download","vulnerability_count":5,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":2,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-123604","aliases":["GHSA-6w6g-hm98-mhgm"],"summary":"hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)","severity":"high","score":8.7,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123604/","wheels":["mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-93657","aliases":["GHSA-5j98-2g5x-46v6"],"summary":"hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures","severity":"high","score":7.5,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-93657/","wheels":["mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-123585","aliases":["GHSA-6f2x-v7q7-m7m5"],"summary":"hickory-resolver follows irrelevant CNAME records","severity":"medium","score":6.9,"package":"hickory-resolver","version":"0.26.1","ecosystem":"crates.io","purl":"pkg:cargo/hickory-resolver@0.26.1","fixed":["0.26.2"],"url":"https://insights.sbomify.com/CVE-2026-123585/","wheels":["mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","mitmproxy_linux-0.12.15-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":2,"total_sboms":2,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":1,"unknown":2}}}