{"url":"https://pypi.sbomify.com/package/qollage/0.10.1","markdown_url":"https://pypi.sbomify.com/package/qollage/0.10.1.md","name":"qollage","version":"0.10.1","purl":"pkg:pypi/qollage@0.10.1","summary":null,"author":null,"project_urls":{},"requires_python":">=3.10","license":"Apache-2.0 AND Apache-2.0 with LLVM-exception AND MIT AND Unicode-DFS-2016 AND\r\n\tBSD-2-Clause AND BSD-3-CLause","classifiers":[],"wheels":[{"filename":"qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/7a/43/5ace21110ec645c681d051d7e2a2d69a3f49243a6a3f8255eaac0d2836da/qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"3605e318-6189-5fce-8400-63fd6f1cd1a2","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/3605e318-6189-5fce-8400-63fd6f1cd1a2/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/f9/0b/b32c5cb7fe67cf479603e6020040a51fe5885d19a6e1379936340cd74bc5/qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"aa80eaed-18f8-53ff-b6d3-6baba5d83ecf","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/aa80eaed-18f8-53ff-b6d3-6baba5d83ecf/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/42/62/b074d87c89cb5196bdb68de18e178fbc0a9229232d27e585a194f1c7968d/qollage-0.10.1-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"b3e7aa6c-d0c3-5188-89f3-0543447df2ea","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b3e7aa6c-d0c3-5188-89f3-0543447df2ea/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/3c/22/9f49a842b3c65bd3ddb71857a8b2a1db81b7d6060ebd5b518e95c347ed5d/qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"8f8ec075-52de-5c29-a73f-4e5cb323185f","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8f8ec075-52de-5c29-a73f-4e5cb323185f/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/a3/3f/6507ffc6b2314c25940bcc13308208157c953eeecda44ef7385c631bb6bd/qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"1d291d03-be3e-5c9d-8b27-5fde835067b9","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1d291d03-be3e-5c9d-8b27-5fde835067b9/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/64/21/50b41dc04315db647d2b15d33059dd19ac43d935f53051928be2c7fb67ed/qollage-0.10.1-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"cb775c33-04e5-56ed-a727-c95630598aa2","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cb775c33-04e5-56ed-a727-c95630598aa2/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/b5/01/d4164e04f749c9f2d347811bee1d21ae1364494935bb3580b299c0972ca3/qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"122324fa-e1bc-551d-a498-21753da90c7f","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/122324fa-e1bc-551d-a498-21753da90c7f/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/a3/63/63f0580ff4b20c7f44cb5fe1dc3166e8abcc8366d2aa690ed737e1cef24e/qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"c69ead66-174a-5eb8-af5f-30db665b3fe0","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c69ead66-174a-5eb8-af5f-30db665b3fe0/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/80/79/361d57b58c4625bc28881df39bb240e2297c2c412bf61fa38c8ad0938f22/qollage-0.10.1-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"9d6583bd-bd05-5cea-941c-8244e5cbf327","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9d6583bd-bd05-5cea-941c-8244e5cbf327/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","url":"https://files.pythonhosted.org/packages/12/85/e4c5158b2dfa5524859470674a5ef94e5b9dea70d1ff9c934e423ae49c6b/qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","sboms":[{"artifact_uuid":"c65ec804-e2da-5240-85eb-1959fe70a780","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c65ec804-e2da-5240-85eb-1959fe70a780/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/bc/4b/b5ec3bb93fee584844f5f4e8c85a4284c4918d783bdaafaa3824ac8e6a5c/qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"a154500d-f040-5dec-a311-ea4dc3ed68bd","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a154500d-f040-5dec-a311-ea4dc3ed68bd/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"qollage-0.10.1-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7b/67/240e08ca05967e42d0f7c6a63415db373640ceb722e2d60bc523c802e301/qollage-0.10.1-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"cbd5f208-15d9-5284-b726-0548d7b62465","path":"qollage-0.10.1.dist-info/sboms/qollage.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/cbd5f208-15d9-5284-b726-0548d7b62465/download","vulnerability_count":15,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.36.2","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.36.2","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.36.2","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.36.2","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.42","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.42","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"1.3.3","ecosystem":"crates.io","purl":"pkg:cargo/bincode@1.3.3","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2025-0141","aliases":[],"summary":"Bincode is unmaintained","severity":"unknown","score":null,"package":"bincode","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/bincode@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0141","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2026-0206","aliases":[],"summary":"`rustybuzz` is unmaintained","severity":"unknown","score":null,"package":"rustybuzz","version":"0.18.0","ecosystem":"crates.io","purl":"pkg:cargo/rustybuzz@0.18.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0206","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.24.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.24.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.9","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.9","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]},{"id":"RUSTSEC-2024-0320","aliases":[],"summary":"yaml-rust is unmaintained.","severity":"unknown","score":null,"package":"yaml-rust","version":"0.4.5","ecosystem":"crates.io","purl":"pkg:cargo/yaml-rust@0.4.5","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0320","wheels":["qollage-0.10.1-cp310-cp310-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp310-cp310-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp310-cp310-win_amd64.whl","qollage-0.10.1-cp311-cp311-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp311-cp311-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp311-cp311-win_amd64.whl","qollage-0.10.1-cp312-cp312-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp312-cp312-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp312-cp312-win_amd64.whl","qollage-0.10.1-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl","qollage-0.10.1-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","qollage-0.10.1-cp313-cp313-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":2,"low":2,"unknown":9}}}