{"url":"https://pypi.sbomify.com/package/polyglot-piranha/0.4.9","markdown_url":"https://pypi.sbomify.com/package/polyglot-piranha/0.4.9.md","name":"polyglot-piranha","version":"0.4.9","purl":"pkg:pypi/polyglot-piranha@0.4.9","summary":"Polyglot Piranha is a library for performing structural find and replace with deep cleanup.","author":"Uber Technologies Inc.","project_urls":{"documentation":"https://github.com/uber/piranha","homepage":"https://github.com/uber/piranha","repository":"https://github.com/uber/piranha"},"requires_python":">=3.8","license":null,"classifiers":[],"wheels":[{"filename":"polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","url":"https://files.pythonhosted.org/packages/16/8d/c8dd7f0e16cf487394ca34d03e527ced76654518d64da9aee6824689507b/polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","sboms":[{"artifact_uuid":"975d165e-daf1-51bc-b7ca-718806f410e5","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/975d165e-daf1-51bc-b7ca-718806f410e5/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/35/5b/1bc699048d110553aa114342f7c5c64a72a466e219f6dc99eb506cea0eb4/polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"da23df0d-ee0a-5bf2-88f2-07d79bba26cc","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/da23df0d-ee0a-5bf2-88f2-07d79bba26cc/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/94/53/05e5d16dd356672b62b533007198e19eab1e4df2f08cc3da1cc89d276af6/polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"cee942b0-80f4-5027-8de7-58ee6e3495a9","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cee942b0-80f4-5027-8de7-58ee6e3495a9/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","url":"https://files.pythonhosted.org/packages/fa/0c/4c8323f1f081623e5a12ce5fe13c886fbcd407b358e4b3a0f9111ee47508/polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","sboms":[{"artifact_uuid":"fee49def-2daa-503e-aca8-9c8b8fc5c469","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/fee49def-2daa-503e-aca8-9c8b8fc5c469/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/ba/4d/0030741ebb7922ec7be47f05c5ef634d6a98df18bcf64e5ba633e508d122/polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"949509db-4a05-5f2f-b483-39de90003baa","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/949509db-4a05-5f2f-b483-39de90003baa/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/87/45/82a0dd4ace26c2c81f73edcd32f54ac41cf8901448f20635c7195ca58e8e/polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"559e6481-0827-5eb4-b06c-915e7871eaea","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/559e6481-0827-5eb4-b06c-915e7871eaea/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","url":"https://files.pythonhosted.org/packages/ab/00/3b4b09947381fc9dfcdaea06ddcf53dee5d1ccb2e8dddd7f114fd245b83c/polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","sboms":[{"artifact_uuid":"ab9aa30c-8d3d-55e6-960b-15fbc672243d","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ab9aa30c-8d3d-55e6-960b-15fbc672243d/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/d7/78/d0ae8bef39fb673e9430cef288c76ab72d477b9ce677177831578512d34c/polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"3a60bf8f-41e6-5992-844d-cbec78649417","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3a60bf8f-41e6-5992-844d-cbec78649417/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/7f/75/17b38130f411e07b4dfdb5feb1fa4630399a12c276f88c6b0d73bf90db23/polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"7f0bd955-ae5f-565e-8c6f-96f677a757d3","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7f0bd955-ae5f-565e-8c6f-96f677a757d3/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","url":"https://files.pythonhosted.org/packages/7c/4d/3e8bf62dd62c568ba22fe9ca670fb13c5aeede73c03f88aa5fb88532b17d/polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","sboms":[{"artifact_uuid":"35018619-b680-5a85-82d9-a3cd49d5e198","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/35018619-b680-5a85-82d9-a3cd49d5e198/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/94/d0/6e9f6c2813894b0c69cb0b8cc4d33ff22ac761a43455c3a5393699e1707f/polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"ac69e842-2c4d-527b-aa45-e416ec2f3ec9","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ac69e842-2c4d-527b-aa45-e416ec2f3ec9/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/12/7f/aa7e19393b17ce2ee9417ef9b154eb8feafa229f5bce6e3fe0a2f0969877/polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"c39f2080-0124-5c04-bf2d-00f3bdb92b23","path":"polyglot_piranha-0.4.9.dist-info/sboms/piranha.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c39f2080-0124-5c04-bf2d-00f3bdb92b23/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.20.3","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.20.3","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2022-0081","aliases":[],"summary":"json is unmaintained","severity":"unknown","score":null,"package":"json","version":"0.12.4","ecosystem":"crates.io","purl":"pkg:cargo/json@0.12.4","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2022-0081","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2023-0018","aliases":["GHSA-mc8h-8q98-g5hr"],"summary":"Race Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU)","severity":"unknown","score":null,"package":"remove_dir_all","version":"0.5.3","ecosystem":"crates.io","purl":"pkg:cargo/remove_dir_all@0.5.3","fixed":["0.8.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2023-0018","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2018-0017","aliases":[],"summary":"`tempdir` crate has been deprecated; use `tempfile` instead","severity":"unknown","score":null,"package":"tempdir","version":"0.3.7","ecosystem":"crates.io","purl":"pkg:cargo/tempdir@0.3.7","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2018-0017","wheels":["polyglot_piranha-0.4.9-cp310-cp310-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp310-cp310-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp311-cp311-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp311-cp311-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp312-cp312-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp312-cp312-manylinux_2_28_x86_64.whl","polyglot_piranha-0.4.9-cp39-cp39-macosx_10_13_universal2.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_aarch64.whl","polyglot_piranha-0.4.9-cp39-cp39-manylinux_2_28_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1,"unknown":3}}}