{"url":"https://pypi.sbomify.com/package/parry-guard/0.1.8","markdown_url":"https://pypi.sbomify.com/package/parry-guard/0.1.8.md","name":"parry-guard","version":"0.1.8","purl":"pkg:pypi/parry-guard@0.1.8","summary":"Prompt injection scanner CLI - substring, unicode, secrets, and ML detection","author":null,"project_urls":{"Homepage":"https://github.com/vaporif/parry-guard","Repository":"https://github.com/vaporif/parry-guard"},"requires_python":">=3.8","license":"MIT","classifiers":["Development Status :: 3 - Alpha","License :: OSI Approved :: MIT License","Programming Language :: Rust","Topic :: Security"],"wheels":[{"filename":"parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","url":"https://files.pythonhosted.org/packages/3b/68/695742c4e22258ec1a0bfa3fd652780182d36588e3e73cb4416f79351a53/parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","sboms":[{"artifact_uuid":"81b4c018-f4bb-5cb0-84ed-819abeda0c38","path":"parry_guard-0.1.8.dist-info/sboms/parry-guard.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/81b4c018-f4bb-5cb0-84ed-819abeda0c38/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"vaporif/parry-guard","workflow":"release.yaml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/vaporif/parry-guard","1.3.6.1.4.1.57264.1.13":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1159849900","1.3.6.1.4.1.57264.1.16":"https://github.com/vaporif","1.3.6.1.4.1.57264.1.17":"3934971","1.3.6.1.4.1.57264.1.18":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/vaporif/parry-guard/actions/runs/38180598688/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","url":"https://files.pythonhosted.org/packages/03/31/f1b12863b07999fc877bce738d93c8b70662db0cfc36e3752a7d7b33a202/parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","sboms":[{"artifact_uuid":"ee534104-ceb9-5f6d-8f0a-cd03902d49aa","path":"parry_guard-0.1.8.dist-info/sboms/parry-guard.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ee534104-ceb9-5f6d-8f0a-cd03902d49aa/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"vaporif/parry-guard","workflow":"release.yaml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/vaporif/parry-guard","1.3.6.1.4.1.57264.1.13":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1159849900","1.3.6.1.4.1.57264.1.16":"https://github.com/vaporif","1.3.6.1.4.1.57264.1.17":"3934971","1.3.6.1.4.1.57264.1.18":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/vaporif/parry-guard/actions/runs/38180598688/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/3c/d7/6ae4041a838bfd77760c78a549efacab11dee4b499248dc4a057043b876c/parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"412f828d-c58b-5f4f-946f-17df717fb8b8","path":"parry_guard-0.1.8.dist-info/sboms/parry-guard.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/412f828d-c58b-5f4f-946f-17df717fb8b8/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"vaporif/parry-guard","workflow":"release.yaml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/vaporif/parry-guard","1.3.6.1.4.1.57264.1.13":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1159849900","1.3.6.1.4.1.57264.1.16":"https://github.com/vaporif","1.3.6.1.4.1.57264.1.17":"3934971","1.3.6.1.4.1.57264.1.18":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/vaporif/parry-guard/actions/runs/38180598688/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/97/c6/1f523b2a2c09855676847a9525774f01690210ea60d4c3014bcee8e78242/parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"baea9003-83b6-579d-a6f6-7567ea70b32e","path":"parry_guard-0.1.8.dist-info/sboms/parry-guard.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/baea9003-83b6-579d-a6f6-7567ea70b32e/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"vaporif/parry-guard","workflow":"release.yaml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.10":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/vaporif/parry-guard","1.3.6.1.4.1.57264.1.13":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.15":"1159849900","1.3.6.1.4.1.57264.1.16":"https://github.com/vaporif","1.3.6.1.4.1.57264.1.17":"3934971","1.3.6.1.4.1.57264.1.18":"https://github.com/vaporif/parry-guard/.github/workflows/release.yaml@refs/tags/v0.1.8","1.3.6.1.4.1.57264.1.19":"f217b58cd4a36ee0a215f18c87078c331da057df","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/vaporif/parry-guard/actions/runs/38180598688/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-115907","aliases":["GHSA-9hj8-73fh-9963"],"summary":"zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115907/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-115908","aliases":["GHSA-hjqx-j4rw-g7xv"],"summary":"zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. ","severity":"high","score":7.4,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115908/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-115906","aliases":["GHSA-8hxf-qr8p-62x4"],"summary":"zip: AES Entry HMAC Authentication Bypass on Premature EOF","severity":"medium","score":6.5,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115906/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.2","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.2","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"8.6.0","ecosystem":"crates.io","purl":"pkg:cargo/zip@8.6.0","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["parry_guard-0.1.8-py3-none-macosx_14_0_arm64.whl","parry_guard-0.1.8-py3-none-macosx_14_0_x86_64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_aarch64.whl","parry_guard-0.1.8-py3-none-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":4,"medium":2,"low":3,"unknown":4}}}