{"url":"https://pypi.sbomify.com/package/pyrage/1.4.0","markdown_url":"https://pypi.sbomify.com/package/pyrage/1.4.0.md","name":"pyrage","version":"1.4.0","purl":"pkg:pypi/pyrage@1.4.0","summary":null,"author":null,"project_urls":{"Homepage":"https://github.com/woodruffw/pyrage"},"requires_python":">=3.10","license":null,"classifiers":["Operating System :: POSIX :: Linux","Programming Language :: Rust"],"wheels":[{"filename":"pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/13/bb/6b167a449e95ecf0eaf4277c949a89a29dfc08cc533f710a9e6f12bef513/pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"d3e27b5f-6389-563e-89f2-12e418ac1170","path":"pyrage-1.4.0.dist-info/sboms/pyrage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/d3e27b5f-6389-563e-89f2-12e418ac1170/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"woodruffw/pyrage","workflow":"release.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.10":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/woodruffw/pyrage","1.3.6.1.4.1.57264.1.13":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.15":"504715417","1.3.6.1.4.1.57264.1.16":"https://github.com/woodruffw","1.3.6.1.4.1.57264.1.17":"3059210","1.3.6.1.4.1.57264.1.18":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.19":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/woodruffw/pyrage/actions/runs/32671593613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/5a/cb/d88aaab0b89141802473f6139fe8e05519d1b6ac06bff8231a1378a5674f/pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"04a29d71-5408-5745-97b2-6bce1ca045c3","path":"pyrage-1.4.0.dist-info/sboms/pyrage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/04a29d71-5408-5745-97b2-6bce1ca045c3/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"woodruffw/pyrage","workflow":"release.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.10":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/woodruffw/pyrage","1.3.6.1.4.1.57264.1.13":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.15":"504715417","1.3.6.1.4.1.57264.1.16":"https://github.com/woodruffw","1.3.6.1.4.1.57264.1.17":"3059210","1.3.6.1.4.1.57264.1.18":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.19":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/woodruffw/pyrage/actions/runs/32671593613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/d9/f0/41da7d88cfdad2eba492f3275ec50a65916ccd3a78140fb15875569ad1ff/pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"e565fdaa-38cd-572f-b681-05696934b848","path":"pyrage-1.4.0.dist-info/sboms/pyrage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e565fdaa-38cd-572f-b681-05696934b848/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"woodruffw/pyrage","workflow":"release.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.10":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/woodruffw/pyrage","1.3.6.1.4.1.57264.1.13":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.15":"504715417","1.3.6.1.4.1.57264.1.16":"https://github.com/woodruffw","1.3.6.1.4.1.57264.1.17":"3059210","1.3.6.1.4.1.57264.1.18":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.19":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/woodruffw/pyrage/actions/runs/32671593613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"pyrage-1.4.0-cp310-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/d3/8c/354fdb9ee7b45a2060272c623536b2cf9f0996de2242eaac177cff3f8003/pyrage-1.4.0-cp310-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"bb183efe-8a9c-5646-a20e-86e376be545d","path":"pyrage-1.4.0.dist-info/sboms/pyrage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bb183efe-8a9c-5646-a20e-86e376be545d/download","vulnerability_count":8,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"woodruffw/pyrage","workflow":"release.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.10":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/woodruffw/pyrage","1.3.6.1.4.1.57264.1.13":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.14":"refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.15":"504715417","1.3.6.1.4.1.57264.1.16":"https://github.com/woodruffw","1.3.6.1.4.1.57264.1.17":"3059210","1.3.6.1.4.1.57264.1.18":"https://github.com/woodruffw/pyrage/.github/workflows/release.yml@refs/tags/v1.4.0","1.3.6.1.4.1.57264.1.19":"c2aff17ff4154df5ce066e7734aaf8e090cb9e39","1.3.6.1.4.1.57264.1.20":"release","1.3.6.1.4.1.57264.1.21":"https://github.com/woodruffw/pyrage/actions/runs/32671593613/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":true,"vulnerabilities":[{"id":"RUSTSEC-2026-0176","aliases":["GHSA-36hh-v3qg-5jq4"],"summary":"Out-of-bounds read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0176","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.24.2","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.24.2","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2023-49092","aliases":["GHSA-4grx-2x9w-596c","GHSA-c38w-74pg-36hr","RUSTSEC-2023-0071"],"summary":"Marvin Attack: potential key recovery through timing sidechannels","severity":"medium","score":5.9,"package":"rsa","version":"0.9.6","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.6","fixed":["0.10.0"],"url":"https://insights.sbomify.com/CVE-2023-49092/","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2024-58262","aliases":["GHSA-x4gp-pqpj-f43q","RUSTSEC-2024-0344"],"summary":"Timing variability in `curve25519-dalek`'s `Scalar29::sub`/`Scalar52::sub`","severity":"low","score":2.9,"package":"curve25519-dalek","version":"4.1.1","ecosystem":"crates.io","purl":"pkg:cargo/curve25519-dalek@4.1.1","fixed":["4.1.3"],"url":"https://insights.sbomify.com/CVE-2024-58262/","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"CVE-2026-21895","aliases":["GHSA-9c48-w39g-hm26"],"summary":"rsa crate has potential panic on a prime being equal to 1","severity":"low","score":2.7,"package":"rsa","version":"0.9.6","ecosystem":"crates.io","purl":"pkg:cargo/rsa@0.9.6","fixed":["0.9.10"],"url":"https://insights.sbomify.com/CVE-2026-21895/","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0374","aliases":[],"summary":"`basic-toml` is unmaintained","severity":"unknown","score":null,"package":"basic-toml","version":"0.1.9","ecosystem":"crates.io","purl":"pkg:cargo/basic-toml@0.1.9","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0374","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0387","aliases":[],"summary":"Multiple timing variability issues in operations intended to be constant-time","severity":"unknown","score":null,"package":"crypto-bigint","version":"0.5.5","ecosystem":"crates.io","purl":"pkg:cargo/crypto-bigint@0.5.5","fixed":["0.7.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0387","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["pyrage-1.4.0-cp310-abi3-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","pyrage-1.4.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","pyrage-1.4.0-cp310-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1,"medium":2,"low":2,"unknown":3}}}