{"url":"https://pypi.sbomify.com/package/noetl/5.3.2","markdown_url":"https://pypi.sbomify.com/package/noetl/5.3.2.md","name":"noetl","version":"5.3.2","purl":"pkg:pypi/noetl@5.3.2","summary":"NoETL workflow automation CLI - execute playbooks locally or orchestrate distributed pipelines","author":null,"project_urls":{"CLI":"https://github.com/noetl/cli","Documentation":"https://noetl.dev","Homepage":"https://noetl.io","Issues":"https://github.com/noetl/noetl/issues","Repository":"https://github.com/noetl/noetl"},"requires_python":">=3.9","license":null,"classifiers":["Development Status :: 4 - Beta","Environment :: Console","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.9","Programming Language :: Rust","Topic :: Software Development :: Build Tools"],"wheels":[{"filename":"noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/d4/09/d93e26db9715e080702ed763a5930dc234a0602416ca116ad8bcf4f0da5c/noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"06f1290d-66a5-5302-8195-64003626dca5","path":"noetl-5.3.2.dist-info/sboms/noetl-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/06f1290d-66a5-5302-8195-64003626dca5/download","vulnerability_count":24,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/f1/f4/92194b878edf1710e66e6d723e6539751727cf2f4e795b9073e8c4818370/noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"d6779647-d2b2-5755-85de-b276371cebba","path":"noetl-5.3.2.dist-info/sboms/noetl-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d6779647-d2b2-5755-85de-b276371cebba/download","vulnerability_count":24,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/58/5c/e83e0e110133c66729fb063cec4382a97a55a5254946bfafb6517359263a/noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"1e21d8b6-c47b-5b7b-909b-b49e92f86ad3","path":"noetl-5.3.2.dist-info/sboms/noetl-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1e21d8b6-c47b-5b7b-909b-b49e92f86ad3/download","vulnerability_count":24,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":3,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.37.5","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.37.5","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.37.5","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.37.5","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0341","aliases":["GHSA-qfwj-vfxf-92j2"],"summary":"Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0341","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.10","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"53.4.1","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@53.4.1","fixed":["57.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0012","aliases":[],"summary":"`backoff` is unmaintained.","severity":"unknown","score":null,"package":"backoff","version":"0.4.0","ecosystem":"crates.io","purl":"pkg:cargo/backoff@0.4.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0012","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0385","aliases":[],"summary":"Non-constant-time mask generation and `u128` comparisons","severity":"unknown","score":null,"package":"ctutils","version":"0.4.2","ecosystem":"crates.io","purl":"pkg:cargo/ctutils@0.4.2","fixed":["0.4.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0385","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0384","aliases":[],"summary":"`instant` is unmaintained","severity":"unknown","score":null,"package":"instant","version":"0.1.13","ecosystem":"crates.io","purl":"pkg:cargo/instant@0.1.13","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0384","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.16","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.16","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0249","aliases":[],"summary":"smartstring is unmaintained","severity":"unknown","score":null,"package":"smartstring","version":"1.0.1","ecosystem":"crates.io","purl":"pkg:cargo/smartstring@1.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0249","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["noetl-5.3.2-cp39-abi3-macosx_11_0_arm64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","noetl-5.3.2-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":3,"total_sboms":3,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":4,"medium":2,"low":3,"unknown":15}}}