{"url":"https://pypi.sbomify.com/package/pypipegraph2/3.5.1","markdown_url":"https://pypi.sbomify.com/package/pypipegraph2/3.5.1.md","name":"pypipegraph2","version":"3.5.1","purl":"pkg:pypi/pypipegraph2@3.5.1","summary":"Advanced python 'what changed and what do we need to do' tracking","author":null,"project_urls":{"homepage":"https://github.com/TyberiusPrime/pypipegraph2"},"requires_python":">=3.12","license":"MIT License\r\n\t\r\n\tCopyright (c) 2023 Florian Finkernagel\r\n\t\r\n\tPermission is hereby granted, free of charge, to any person obtaining a copy\r\n\tof this software and associated documentation files (the \"Software\"), to\r\n\tdeal in the Software without restriction, including without limitation the\r\n\trights to use, copy, modify, merge, publish, distribute, sublicense, and/or\r\n\tsell copies of the Software, and to permit persons to whom the Software is\r\n\tfurnished to do so, subject to the following conditions:\r\n\t\r\n\tThe above copyright notice and this permission notice (including the next\r\n\tparagraph) shall be included in all copies or substantial portions of the\r\n\tSoftware.\r\n\t\r\n\tTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\r\n\tIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\r\n\tFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL\r\n\tTHE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\r\n\tLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\r\n\tOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\r\n\tTHE SOFTWARE.\r\n\t","classifiers":["Development Status :: 4 - Beta","Programming Language :: Python","Programming Language :: Rust"],"wheels":[{"filename":"pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/0a/0c/ea79f624ed296c1c17abba9cbbe08e91d1654e7f83a4ac704fc7960683cf/pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"dc6c0f6c-67b6-528f-9d8e-283cae14af36","path":"pypipegraph2-3.5.1.dist-info/sboms/pypipegraph2.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dc6c0f6c-67b6-528f-9d8e-283cae14af36/download","vulnerability_count":6,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":1,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.21.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.21.2","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2025-0056","aliases":[],"summary":"adler crate is unmaintained, use adler2 instead","severity":"unknown","score":null,"package":"adler","version":"1.0.2","ecosystem":"crates.io","purl":"pkg:cargo/adler@1.0.2","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0056","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2021-0145","aliases":["GHSA-g98v-hv3f-hcfr"],"summary":"Potential unaligned read","severity":"unknown","score":null,"package":"atty","version":"0.2.14","ecosystem":"crates.io","purl":"pkg:cargo/atty@0.2.14","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2021-0145","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]},{"id":"RUSTSEC-2024-0375","aliases":[],"summary":"`atty` is unmaintained","severity":"unknown","score":null,"package":"atty","version":"0.2.14","ecosystem":"crates.io","purl":"pkg:cargo/atty@0.2.14","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0375","wheels":["pypipegraph2-3.5.1-cp38-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":1,"total_sboms":1,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":1,"low":1,"unknown":3}}}