{"url":"https://pypi.sbomify.com/package/ormdantic/2.0.1","markdown_url":"https://pypi.sbomify.com/package/ormdantic/2.0.1.md","name":"ormdantic","version":"2.0.1","purl":"pkg:pypi/ormdantic@2.0.1","summary":"Rust-backed async ORM for Python applications that already use Pydantic models as their data boundary.","author":null,"project_urls":{"Documentation":"https://ormdantic.yezz.me/","Funding":"https://github.com/sponsors/yezz123","Homepage":"https://github.com/yezz123/ormdantic"},"requires_python":">=3.10","license":null,"classifiers":["Development Status :: 3 - Alpha","Framework :: Pydantic","Framework :: Pydantic :: 2","Intended Audience :: Developers","Intended Audience :: Information Technology","Operating System :: MacOS","Operating System :: Microsoft :: Windows","Operating System :: POSIX :: Linux","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3 :: Only","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: GraalPy","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust","Typing :: Typed"],"wheels":[{"filename":"ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/e3/28/00ed0c8f6dd98bfc7923779e53ae2969fcac08ba5829cb603b7a5931d40a/ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8d1adb44-d8ab-599c-ae59-72299cbbbe89","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8d1adb44-d8ab-599c-ae59-72299cbbbe89/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","url":"https://files.pythonhosted.org/packages/a1/8a/672551e69527dbeba871eee633c83fb7e795209050650f129bd7c9c80013/ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","sboms":[{"artifact_uuid":"60be06ef-c323-551f-994e-cf83f19d4a83","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/60be06ef-c323-551f-994e-cf83f19d4a83/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/be/cc/996eab852e712d07a6825578e1c8e43408328d6e00afa2f59e321bb2d378/ormdantic-2.0.1-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"c9be2196-1c18-5ebf-a8f8-7d4bc88048ad","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c9be2196-1c18-5ebf-a8f8-7d4bc88048ad/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b1/78/c074d5cce9332cd3ea43eb01410b44e58b70b5eeca0e81797f5df72efd32/ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"19bd300b-bd27-5a2e-9699-92f2fce49274","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/19bd300b-bd27-5a2e-9699-92f2fce49274/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","url":"https://files.pythonhosted.org/packages/fc/01/2ac9be5c0463eb9fe4af975e8a2ab2b1655a29399ecc2052727a62f722b1/ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","sboms":[{"artifact_uuid":"6a5d41d5-4cbe-55b2-8ce9-30ef02563ddf","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6a5d41d5-4cbe-55b2-8ce9-30ef02563ddf/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/a3/db/8616802e2550e9ea301ccfa183e75db1af52139c9674e71a3d74c2dbfa96/ormdantic-2.0.1-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"19547283-d143-55b7-9a1b-3749de68f3cf","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/19547283-d143-55b7-9a1b-3749de68f3cf/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/c0/82/2b9a7f54aa2f33a610feb7022c75ef18d5fcbd1e05e18412077cedf9ed92/ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"2d5379fe-51e4-51f2-8ad9-5d600d5fca8d","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2d5379fe-51e4-51f2-8ad9-5d600d5fca8d/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","url":"https://files.pythonhosted.org/packages/03/78/215532b65f275558024bef335f22b4a9d267bfc90fcc13475d359f700b65/ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","sboms":[{"artifact_uuid":"5bb88b90-4626-5a11-9a38-20d48befc990","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5bb88b90-4626-5a11-9a38-20d48befc990/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/e1/ac/47262126e4cfd7ef3f1649f59494bda4c5404c0af0d514c3bf1d378c1807/ormdantic-2.0.1-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"e8846cd8-e682-5550-80e4-c07fda60ff43","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e8846cd8-e682-5550-80e4-c07fda60ff43/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/51/88/613fd45020b0a3923e8bd0eece9eb18950c360fa883f2f2fc6b4b381034f/ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"33b6317c-c599-5a1a-a2e0-60edc50e3bb5","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/33b6317c-c599-5a1a-a2e0-60edc50e3bb5/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","url":"https://files.pythonhosted.org/packages/96/65/1fe78c1ff0228d0a2a7eaf7d26cf950e9d2ddd5b07c98a9e17351b9f0af9/ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","sboms":[{"artifact_uuid":"d08bfee1-0a9d-549e-b06b-f8c2f636578f","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d08bfee1-0a9d-549e-b06b-f8c2f636578f/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/92/b6/62134382cccceaf7d3eefe10ba1e1a55007d700622bc0fcfacecdd7bd43b/ormdantic-2.0.1-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"9eb0b233-3e50-52ae-b9db-741286f2cc1c","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9eb0b233-3e50-52ae-b9db-741286f2cc1c/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b2/89/b48ac034aea7d200641d47a0199c82951f5419887ec69bc94767895bc55d/ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"838aa104-03a8-5578-bdc2-c2b4a116bdb2","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/838aa104-03a8-5578-bdc2-c2b4a116bdb2/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","url":"https://files.pythonhosted.org/packages/5a/71/490960c99d16b42f4d270f218ea3fbe19a6406873baa747b5d7d07c63b79/ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","sboms":[{"artifact_uuid":"c34e84a3-14a0-5cce-b574-733e00c42f1a","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c34e84a3-14a0-5cce-b574-733e00c42f1a/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"ormdantic-2.0.1-cp314-cp314-win_amd64.whl","url":"https://files.pythonhosted.org/packages/c7/8b/e6c537765ce2cfcf149614ee40220181bdfe677bedb4cde319e507b954bc/ormdantic-2.0.1-cp314-cp314-win_amd64.whl","sboms":[{"artifact_uuid":"bc8e6bba-1077-55f1-8ab1-caea398135e0","path":"ormdantic-2.0.1.dist-info/sboms/ormdantic-py.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bc8e6bba-1077-55f1-8ab1-caea398135e0/download","vulnerability_count":25,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":15,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0179","aliases":["GHSA-5x78-73v4-xg6w"],"summary":"Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service","severity":"high","score":8.7,"package":"postgres-protocol","version":"0.6.11","ecosystem":"crates.io","purl":"pkg:cargo/postgres-protocol@0.6.11","fixed":["0.6.12"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0179","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93599","aliases":["GHSA-82j2-j2ch-gfr8","RUSTSEC-2026-0104"],"summary":"Reachable panic in certificate revocation list parsing","severity":"high","score":7.5,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.13"],"url":"https://insights.sbomify.com/CVE-2026-93599/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0180","aliases":["GHSA-rgqc-3x5p-6gwg"],"summary":"Panic decoding a malformed `hstore` value allows denial of service","severity":"medium","score":6.9,"package":"postgres-protocol","version":"0.6.11","ecosystem":"crates.io","purl":"pkg:cargo/postgres-protocol@0.6.11","fixed":["0.6.12"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0180","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0178","aliases":["GHSA-3gjw-f78c-vvpw"],"summary":"Panic on a `DataRow` with fewer fields than columns allows denial of service","severity":"medium","score":6.9,"package":"tokio-postgres","version":"0.7.17","ecosystem":"crates.io","purl":"pkg:cargo/tokio-postgres@0.7.17","fixed":["0.7.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0178","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-119375","aliases":["GHSA-72w2-rjgg-q729","RUSTSEC-2026-0459"],"summary":"`libsqlite3-sys` via C SQLite CVE-2026-119375","severity":"medium","score":6.8,"package":"libsqlite3-sys","version":"0.30.1","ecosystem":"crates.io","purl":"pkg:cargo/libsqlite3-sys@0.30.1","fixed":["0.39.0"],"url":"https://insights.sbomify.com/CVE-2026-119375/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"GHSA-qwgh-2vcv-g2f7","aliases":[],"summary":"block_buffer: panic corrupts inline buffer position","severity":"medium","score":6.3,"package":"block-buffer","version":"0.12.0","ecosystem":"crates.io","purl":"pkg:cargo/block-buffer@0.12.0","fixed":[],"url":"https://osv.dev/vulnerability/GHSA-qwgh-2vcv-g2f7","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.21.12","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.21.12","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93600","aliases":["GHSA-965h-392x-2mh5","RUSTSEC-2026-0098"],"summary":"Name constraints for URI names were incorrectly accepted","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93600/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-93601","aliases":["GHSA-xgp8-3hg3-c2mh","RUSTSEC-2026-0099"],"summary":"Name constraints were accepted for certificates asserting a wildcard name","severity":"low","score":2.2,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.12"],"url":"https://insights.sbomify.com/CVE-2026-93601/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0385","aliases":[],"summary":"Non-constant-time mask generation and `u128` comparisons","severity":"unknown","score":null,"package":"ctutils","version":"0.4.2","ecosystem":"crates.io","purl":"pkg:cargo/ctutils@0.4.2","fixed":["0.4.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0385","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.29","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.29","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0253","aliases":[],"summary":"Potential use-after-free due to lack of panic safety in `LruCache::pop()`","severity":"unknown","score":null,"package":"lru","version":"0.16.4","ecosystem":"crates.io","purl":"pkg:cargo/lru@0.16.4","fixed":["0.18.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0253","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"1.0.4","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@1.0.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2025-0134","aliases":[],"summary":"rustls-pemfile is unmaintained","severity":"unknown","score":null,"package":"rustls-pemfile","version":"2.2.0","ecosystem":"crates.io","purl":"pkg:cargo/rustls-pemfile@2.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0134","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.101.7","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.101.7","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.7","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.7","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["ormdantic-2.0.1-cp310-cp310-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp310-cp310-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp310-cp310-win_amd64.whl","ormdantic-2.0.1-cp311-cp311-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp311-cp311-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp311-cp311-win_amd64.whl","ormdantic-2.0.1-cp312-cp312-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp312-cp312-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp312-cp312-win_amd64.whl","ormdantic-2.0.1-cp313-cp313-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp313-cp313-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp313-cp313-win_amd64.whl","ormdantic-2.0.1-cp314-cp314-macosx_11_0_arm64.whl","ormdantic-2.0.1-cp314-cp314-manylinux_2_38_x86_64.whl","ormdantic-2.0.1-cp314-cp314-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":15,"total_sboms":15,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":7,"low":6,"unknown":10}}}