{"url":"https://pypi.sbomify.com/package/peppi-py-vladfi/0.9.2","markdown_url":"https://pypi.sbomify.com/package/peppi-py-vladfi/0.9.2.md","name":"peppi-py-vladfi","version":"0.9.2","purl":"pkg:pypi/peppi-py-vladfi@0.9.2","summary":null,"author":null,"project_urls":{},"requires_python":">=3.10","license":null,"classifiers":[],"wheels":[{"filename":"peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/43/11/748d1fa07591f5e5b456f9f68f815f616ccce92e29efcb4826c96524196d/peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"bd7a3c5d-e4a0-568b-a66e-5ad049cf5204","path":"peppi_py_vladfi-0.9.2.dist-info/sboms/peppi-py-vladfi.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bd7a3c5d-e4a0-568b-a66e-5ad049cf5204/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/36/12/19f6bc2108ae05295d8c90ef49733e8efb6eb7710dc60d7fe5981701b7d2/peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"aed78681-f174-5227-ba31-41628c5bc1dc","path":"peppi_py_vladfi-0.9.2.dist-info/sboms/peppi-py-vladfi.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/aed78681-f174-5227-ba31-41628c5bc1dc/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/6a/c5/c4833ff5ed0c9d6e176e686e704de525022e5a759d9d46e34281785b2388/peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"dcf634da-27a8-58ba-95f3-6c13037722bf","path":"peppi_py_vladfi-0.9.2.dist-info/sboms/peppi-py-vladfi.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dcf634da-27a8-58ba-95f3-6c13037722bf/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/11/60/4e5f48da5241c1540e960928941e395bbfcda6130919faa9c0ec411acb11/peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"e511337d-e1be-5fbe-a7d4-25bbc46cdb82","path":"peppi_py_vladfi-0.9.2.dist-info/sboms/peppi-py-vladfi.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e511337d-e1be-5fbe-a7d4-25bbc46cdb82/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2025-0038","aliases":["GHSA-wv8j-m3hx-924j"],"summary":"Out of bounds access in public safe API","severity":"high","score":8.7,"package":"arrow2","version":"0.17.4","ecosystem":"crates.io","purl":"pkg:cargo/arrow2@0.17.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0038","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.26.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.26.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.26.0","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.26.0","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2023-0086","aliases":["GHSA-2326-pfpj-vx3h"],"summary":"Multiple soundness issues","severity":"unknown","score":null,"package":"lexical-core","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/lexical-core@0.8.5","fixed":["1.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2023-0086","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"6.0.6","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@6.0.6","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["peppi_py_vladfi-0.9.2-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","peppi_py_vladfi-0.9.2-cp310-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-09","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":1,"unknown":11}}}