{"url":"https://pypi.sbomify.com/package/pyeryx/0.13.0","markdown_url":"https://pypi.sbomify.com/package/pyeryx/0.13.0.md","name":"pyeryx","version":"0.13.0","purl":"pkg:pypi/pyeryx@0.13.0","summary":"Python sandbox powered by WebAssembly","author":null,"project_urls":{},"requires_python":">=3.10","license":"MIT OR Apache-2.0","classifiers":["Development Status :: 3 - Alpha","Intended Audience :: Developers","License :: OSI Approved :: Apache Software License","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.9","Programming Language :: Rust","Topic :: Security","Topic :: Software Development :: Interpreters"],"wheels":[{"filename":"pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/1a/ec/c44ccf502418630db936c611317d16924e2c573c3cb9d94d81dd74403cc8/pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"6806831e-9ca3-5b8c-8a7d-137d2f81a7d3","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6806831e-9ca3-5b8c-8a7d-137d2f81a7d3/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/ec/54/fe54b87853cec0d669681a9bee616910d89afa873a743ee586e5056c0bbf/pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8b67e9ec-3b49-5c79-be94-bb7346686da8","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8b67e9ec-3b49-5c79-be94-bb7346686da8/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","url":"https://files.pythonhosted.org/packages/2b/13/a92ef38689646162976d8432bb905309f8ec6f6547379f38c220c8ee4793/pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","sboms":[{"artifact_uuid":"4600d50b-f5a1-5786-a03f-d804ac550895","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4600d50b-f5a1-5786-a03f-d804ac550895/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","url":"https://files.pythonhosted.org/packages/b0/49/345646d51f4023df96725636ed394fb08ee995f3a72fe36b9a00d3df5985/pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","sboms":[{"artifact_uuid":"95ba5396-6f4b-5d1b-ab47-d13f2a920461","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/95ba5396-6f4b-5d1b-ab47-d13f2a920461/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/55/61/6a3e9400b82665e0fa39420bd1ff0422fd0ba00a79de147124f66f296e66/pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"57ccf92d-bfda-53e4-bcaf-b50cddb3a494","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/57ccf92d-bfda-53e4-bcaf-b50cddb3a494/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/a5/19/384044523858c48efd72d003e7ecdc4f6beb32b66bf5783f2850ee51a242/pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"ee419986-cc50-5c09-b6c2-264515d54097","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ee419986-cc50-5c09-b6c2-264515d54097/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyeryx-0.13.0-cp312-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/8a/b2/1e8fc13a04f68d7f33c16ca0dc94aad2e0718f7fbdf82b77349527b90650/pyeryx-0.13.0-cp312-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"e4059587-05ae-5584-b4dd-ed99611e5738","path":"pyeryx-0.13.0.dist-info/sboms/eryx-python.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e4059587-05ae-5584-b4dd-ed99611e5738/download","vulnerability_count":14,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"eryx-org/eryx","workflow":"python-release.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.10":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/eryx-org/eryx","1.3.6.1.4.1.57264.1.13":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.14":"refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.15":"1114797983","1.3.6.1.4.1.57264.1.16":"https://github.com/eryx-org","1.3.6.1.4.1.57264.1.17":"250332164","1.3.6.1.4.1.57264.1.18":"https://github.com/eryx-org/eryx/.github/workflows/python-release.yml@refs/tags/eryx-v0.13.0","1.3.6.1.4.1.57264.1.19":"27e4e5f94eccc7cc2b830050018602d63ab95b46","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/eryx-org/eryx/actions/runs/41313617548/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0462","aliases":["GHSA-c9f9-cp8h-jcj5"],"summary":"Unbounded response body buffering in Streamable HTTP clients","severity":"medium","score":6.5,"package":"rmcp","version":"3.8.0","ecosystem":"crates.io","purl":"pkg:cargo/rmcp@3.8.0","fixed":["3.9.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0462","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.3.0","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.3.0","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["pyeryx-0.13.0-cp312-abi3-macosx_10_12_x86_64.whl","pyeryx-0.13.0-cp312-abi3-macosx_11_0_arm64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.whl","pyeryx-0.13.0-cp312-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_aarch64.whl","pyeryx-0.13.0-cp312-abi3-musllinux_1_2_x86_64.whl","pyeryx-0.13.0-cp312-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"medium":1,"unknown":13}}}