{"url":"https://pypi.sbomify.com/package/pyfishhash/0.1.7","markdown_url":"https://pypi.sbomify.com/package/pyfishhash/0.1.7.md","name":"pyfishhash","version":"0.1.7","purl":"pkg:pypi/pyfishhash@0.1.7","summary":null,"author":null,"project_urls":{},"requires_python":">=3.12","license":null,"classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"pyfishhash-0.1.7-cp312-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/7b/bd/fb8eeda5ed52be3f2ea57be8e54ac4fb5c3ea50b77b0f861ebe110f48497/pyfishhash-0.1.7-cp312-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"690bd8f9-f22d-5ae2-81cf-b2021ca790e9","path":"pyfishhash-0.1.7.dist-info/sboms/pyfishhash.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/690bd8f9-f22d-5ae2-81cf-b2021ca790e9/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyfishhash-0.1.7-cp312-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/2d/8c/84a601b28c7d432f6f536125c744af7070b7ddf79cbe12dc17447c0eb36f/pyfishhash-0.1.7-cp312-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"694a9dca-c68c-5449-90af-71595b9713c6","path":"pyfishhash-0.1.7.dist-info/sboms/pyfishhash.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/694a9dca-c68c-5449-90af-71595b9713c6/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyfishhash-0.1.7-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/4d/27/cb850d6916fa7cbbe17d264ffd979dfa273fda51284aa47b79b3f8713986/pyfishhash-0.1.7-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"88c52aa7-7a5b-5be0-af8c-8e59c15c79f6","path":"pyfishhash-0.1.7.dist-info/sboms/pyfishhash.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/88c52aa7-7a5b-5be0-af8c-8e59c15c79f6/download","vulnerability_count":3,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":3,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["pyfishhash-0.1.7-cp312-abi3-macosx_10_12_x86_64.whl","pyfishhash-0.1.7-cp312-abi3-macosx_11_0_arm64.whl","pyfishhash-0.1.7-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["pyfishhash-0.1.7-cp312-abi3-macosx_10_12_x86_64.whl","pyfishhash-0.1.7-cp312-abi3-macosx_11_0_arm64.whl","pyfishhash-0.1.7-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["pyfishhash-0.1.7-cp312-abi3-macosx_10_12_x86_64.whl","pyfishhash-0.1.7-cp312-abi3-macosx_11_0_arm64.whl","pyfishhash-0.1.7-cp312-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":3,"total_sboms":3,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1}}}