{"url":"https://pypi.sbomify.com/package/quantization-rs/0.10.0","markdown_url":"https://pypi.sbomify.com/package/quantization-rs/0.10.0.md","name":"quantization-rs","version":"0.10.0","purl":"pkg:pypi/quantization-rs@0.10.0","summary":"Neural network quantization toolkit for ONNX models","author":null,"project_urls":{"Documentation":"https://github.com/AR-Kamal/quantize-rs#readme","Homepage":"https://github.com/AR-Kamal/quantize-rs","Repository":"https://github.com/AR-Kamal/quantize-rs"},"requires_python":">=3.9","license":"MIT","classifiers":["Development Status :: 4 - Beta","Intended Audience :: Developers","Intended Audience :: Science/Research","License :: OSI Approved :: MIT License","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.9","Programming Language :: Rust","Topic :: Scientific/Engineering :: Artificial Intelligence"],"wheels":[{"filename":"quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/25/69/b107766f9d0ceb17d758005e8dbb859d38d45fbdba0a669246bce1e0971d/quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"8ab35732-e3cb-5444-8a6e-3189aad5e328","path":"quantization_rs-0.10.0.dist-info/sboms/quantize-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8ab35732-e3cb-5444-8a6e-3189aad5e328/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/6c/d0/d25649d318544a61b5de16232f2d54a13cc604fda956d4eba356adbf051c/quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"7370fc7d-a91a-556d-b37a-85c2b987e6f1","path":"quantization_rs-0.10.0.dist-info/sboms/quantize-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/7370fc7d-a91a-556d-b37a-85c2b987e6f1/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/02/5b/93991f438d61aa418b7b35bdd3c5d5c26ad27ee935e98486b4b428c82131/quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"ed23d5a2-dd85-5b21-a4af-9a794aa4e802","path":"quantization_rs-0.10.0.dist-info/sboms/quantize-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/ed23d5a2-dd85-5b21-a4af-9a794aa4e802/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"quantization_rs-0.10.0-cp39-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/bd/2e/8f82defc43771e0814bdd07925de20d4b12482d746f8986ca3cf6eb3384e/quantization_rs-0.10.0-cp39-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"0242267a-e6e9-5e85-9460-70e75c2b320b","path":"quantization_rs-0.10.0.dist-info/sboms/quantize-rs.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0242267a-e6e9-5e85-9460-70e75c2b320b/download","vulnerability_count":21,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-115905","aliases":["GHSA-m665-v7pm-7grj"],"summary":"zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE","severity":"critical","score":10.0,"package":"zip","version":"0.5.13","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.5.13","fixed":["9.0.5"],"url":"https://insights.sbomify.com/CVE-2026-115905/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0369","aliases":["GHSA-4684-h2q9-2vcp"],"summary":"ZipStreamReader::extract() and ZipArchive::extract() apply Unix permissions through symlinks without confining the target","severity":"critical","score":9.1,"package":"zip","version":"0.5.13","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.5.13","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0369","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-33055","aliases":["GHSA-gchp-q4r4-x4ff","RUSTSEC-2026-0068"],"summary":"tar-rs incorrectly ignores PAX size headers if header size is nonzero","severity":"high","score":8.1,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.45"],"url":"https://insights.sbomify.com/CVE-2026-33055/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-115909","aliases":["GHSA-q7v9-x93c-xqv3","RUSTSEC-2026-0429"],"summary":"zip: `ZipArchive::extract` aborts the process on a symlink entry with a large declared size","severity":"high","score":7.5,"package":"zip","version":"0.5.13","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.5.13","fixed":["9.0.0"],"url":"https://insights.sbomify.com/CVE-2026-115909/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0367","aliases":["GHSA-vv5m-jxxh-4627"],"summary":" Insecure Preservation of SUID/SGID Bits during ZIP Extraction Leading to Potential Privilege Escalation","severity":"high","score":7.3,"package":"zip","version":"0.5.13","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.5.13","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0367","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-25727","aliases":["GHSA-r6v5-fh4h-64xc","RUSTSEC-2026-0009"],"summary":"Denial of Service via Stack Exhaustion","severity":"medium","score":6.8,"package":"time","version":"0.3.46","ecosystem":"crates.io","purl":"pkg:cargo/time@0.3.46","fixed":["0.3.47"],"url":"https://insights.sbomify.com/CVE-2026-25727/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-33056","aliases":["GHSA-j4xf-2g29-59ph","RUSTSEC-2026-0067"],"summary":"`unpack_in` can chmod arbitrary directories by following symlinks","severity":"medium","score":6.5,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.45"],"url":"https://insights.sbomify.com/CVE-2026-33056/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-55093","aliases":["GHSA-x5mv-8wgw-29hg","RUSTSEC-2026-0217"],"summary":"Integer overflow in tract-nnef NNEF tensor parser leads to out-of-bounds read on model load","severity":"medium","score":6.1,"package":"tract-nnef","version":"0.21.10","ecosystem":"crates.io","purl":"pkg:cargo/tract-nnef@0.21.10","fixed":["0.21.16"],"url":"https://insights.sbomify.com/CVE-2026-55093/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"CVE-2026-55832","aliases":["GHSA-h668-6x6g-f8r5"],"summary":"tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx","severity":"medium","score":6.1,"package":"tract-onnx","version":"0.21.10","ecosystem":"crates.io","purl":"pkg:cargo/tract-onnx@0.21.10","fixed":["0.21.17"],"url":"https://insights.sbomify.com/CVE-2026-55832/","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.100","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.100","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0319","aliases":[],"summary":"anymap2 is unmaintained","severity":"unknown","score":null,"package":"anymap2","version":"0.13.0","ecosystem":"crates.io","purl":"pkg:cargo/anymap2@0.13.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0319","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.9","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.9","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0097","aliases":["GHSA-cq8v-f236-94qc"],"summary":"Rand is unsound with a custom logger using `rand::rng()`","severity":"unknown","score":null,"package":"rand","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/rand@0.8.5","fixed":["0.8.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0097","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"GHSA-3pv8-6f4r-ffg2","aliases":[],"summary":"tar has a PAX header desynchronization issue","severity":"unknown","score":null,"package":"tar","version":"0.4.44","ecosystem":"crates.io","purl":"pkg:cargo/tar@0.4.44","fixed":["0.4.46"],"url":"https://osv.dev/vulnerability/GHSA-3pv8-6f4r-ffg2","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0449","aliases":[],"summary":"unsafe-libyaml is unmaintained","severity":"unknown","score":null,"package":"unsafe-libyaml","version":"0.2.11","ecosystem":"crates.io","purl":"pkg:cargo/unsafe-libyaml@0.2.11","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0449","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0368","aliases":["GHSA-4v9h-p7m9-rh26"],"summary":"zip: `ZipArchive::extract` creates symbolic links whose attacker-controlled targets are outside the destination directory","severity":"unknown","score":null,"package":"zip","version":"0.5.13","ecosystem":"crates.io","purl":"pkg:cargo/zip@0.5.13","fixed":["9.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0368","wheels":["quantization_rs-0.10.0-cp39-abi3-macosx_10_12_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-macosx_11_0_arm64.whl","quantization_rs-0.10.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","quantization_rs-0.10.0-cp39-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"critical":2,"high":4,"medium":5,"low":1,"unknown":9}}}