{"url":"https://pypi.sbomify.com/package/mozilla-merino-ext/0.4.0","markdown_url":"https://pypi.sbomify.com/package/mozilla-merino-ext/0.4.0.md","name":"mozilla-merino-ext","version":"0.4.0","purl":"pkg:pypi/mozilla-merino-ext@0.4.0","summary":null,"author":null,"project_urls":{},"requires_python":">=3.13","license":"MPL-2.0","classifiers":[],"wheels":[{"filename":"mozilla_merino_ext-0.4.0-cp313-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/a8/26/6dde19995dfaf8d0c87159572df301c956b0a67f870465a4d60a125de803/mozilla_merino_ext-0.4.0-cp313-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"7a0f4ad1-aecc-56bb-979d-f96bbbea141a","path":"mozilla_merino_ext-0.4.0.dist-info/sboms/mozilla-merino-ext.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7a0f4ad1-aecc-56bb-979d-f96bbbea141a/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mozilla_merino_ext-0.4.0-cp313-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/7e/8c/ed9bcf30c7e3005075947ba7bf3db7b084dde65aa1a2ab1773d3de7d72ea/mozilla_merino_ext-0.4.0-cp313-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0693f989-3273-588b-b502-f93c8a5dc415","path":"mozilla_merino_ext-0.4.0.dist-info/sboms/mozilla-merino-ext.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0693f989-3273-588b-b502-f93c8a5dc415/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mozilla_merino_ext-0.4.0-cp313-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/9d/47/a2cce756a0b9e4c1c1d75a35e9138fdeceb1fe221214b8e093a6e9c95a9d/mozilla_merino_ext-0.4.0-cp313-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"8cffa98e-3c3f-541e-a6a1-5ee0c444c5dc","path":"mozilla_merino_ext-0.4.0.dist-info/sboms/mozilla-merino-ext.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8cffa98e-3c3f-541e-a6a1-5ee0c444c5dc/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mozilla_merino_ext-0.4.0-cp313-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/1e/14/4cfd98704efec220bb462e67ea5ef3b20152c0afd877a4f76bee0613315a/mozilla_merino_ext-0.4.0-cp313-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"c70733d8-f71f-5bdf-9cfe-d3268d1f1392","path":"mozilla_merino_ext-0.4.0.dist-info/sboms/mozilla-merino-ext.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c70733d8-f71f-5bdf-9cfe-d3268d1f1392/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"mozilla_merino_ext-0.4.0-cp313-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/a5/42/603e2b1791a8393db16eb8cfa3fa5cddd72857c628aa3783133540f251ce/mozilla_merino_ext-0.4.0-cp313-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"9de2f880-3ca0-565e-984f-18b2c6b58d5d","path":"mozilla_merino_ext-0.4.0.dist-info/sboms/mozilla-merino-ext.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9de2f880-3ca0-565e-984f-18b2c6b58d5d/download","vulnerability_count":2,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["mozilla_merino_ext-0.4.0-cp313-abi3-macosx_10_12_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-macosx_11_0_arm64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-musllinux_1_2_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.25.1","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["mozilla_merino_ext-0.4.0-cp313-abi3-macosx_10_12_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-macosx_11_0_arm64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-musllinux_1_2_x86_64.whl","mozilla_merino_ext-0.4.0-cp313-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1}}}