{"url":"https://pypi.sbomify.com/package/rogtk/0.1.25","markdown_url":"https://pypi.sbomify.com/package/rogtk/0.1.25.md","name":"rogtk","version":"0.1.25","purl":"pkg:pypi/rogtk@0.1.25","summary":"Rust-based genomics toolkit - high-performance backend for ogtk","author":null,"project_urls":{},"requires_python":">=3.10","license":"MIT","classifiers":["Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Programming Language :: Rust"],"wheels":[{"filename":"rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/70/71/fe9d54f6bb96b99e23a9d9eddb5ac16b20e0a8776682b37fe2d959fed052/rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"5b851607-c6cc-5543-8c96-70e2cfaceed3","path":"rogtk-0.1.25.dist-info/sboms/rogtk.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5b851607-c6cc-5543-8c96-70e2cfaceed3/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tzeitim/rogtk","workflow":"publish_to_pypi.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.10":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tzeitim/rogtk","1.3.6.1.4.1.57264.1.13":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.15":"338788413","1.3.6.1.4.1.57264.1.16":"https://github.com/tzeitim","1.3.6.1.4.1.57264.1.17":"58686855","1.3.6.1.4.1.57264.1.18":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.19":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/tzeitim/rogtk/actions/runs/33548630278/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/b3/3e/8b10d06423b81a2723394a67700c6c3f632b39b2c1320baf2a48f953f142/rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"8e02597e-7230-5420-8182-81b2645789ca","path":"rogtk-0.1.25.dist-info/sboms/rogtk.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/8e02597e-7230-5420-8182-81b2645789ca/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tzeitim/rogtk","workflow":"publish_to_pypi.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.10":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tzeitim/rogtk","1.3.6.1.4.1.57264.1.13":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.15":"338788413","1.3.6.1.4.1.57264.1.16":"https://github.com/tzeitim","1.3.6.1.4.1.57264.1.17":"58686855","1.3.6.1.4.1.57264.1.18":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.19":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/tzeitim/rogtk/actions/runs/33548630278/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/63/a3/fa068b118c5617842deb31f428bd506029e8bc1fc0ba4973f4c3292ce33b/rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"e3afdd7f-9bb0-520c-bff3-f4a4efefe68f","path":"rogtk-0.1.25.dist-info/sboms/rogtk.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/e3afdd7f-9bb0-520c-bff3-f4a4efefe68f/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tzeitim/rogtk","workflow":"publish_to_pypi.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.10":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tzeitim/rogtk","1.3.6.1.4.1.57264.1.13":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.15":"338788413","1.3.6.1.4.1.57264.1.16":"https://github.com/tzeitim","1.3.6.1.4.1.57264.1.17":"58686855","1.3.6.1.4.1.57264.1.18":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.19":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/tzeitim/rogtk/actions/runs/33548630278/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"rogtk-0.1.25-cp38-abi3-win_amd64.whl","url":"https://files.pythonhosted.org/packages/b6/cb/d2dc94d1555e1559d775037d5bc199ac45cf87397a3dfd4fdf87233a5f0b/rogtk-0.1.25-cp38-abi3-win_amd64.whl","sboms":[{"artifact_uuid":"687e0d41-76e3-5614-be2e-6748067819bf","path":"rogtk-0.1.25.dist-info/sboms/rogtk.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/687e0d41-76e3-5614-be2e-6748067819bf/download","vulnerability_count":30,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"tzeitim/rogtk","workflow":"publish_to_pypi.yml","environment":"pypi","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.10":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/tzeitim/rogtk","1.3.6.1.4.1.57264.1.13":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.15":"338788413","1.3.6.1.4.1.57264.1.16":"https://github.com/tzeitim","1.3.6.1.4.1.57264.1.17":"58686855","1.3.6.1.4.1.57264.1.18":"https://github.com/tzeitim/rogtk/.github/workflows/publish_to_pypi.yml@refs/tags/v0.1.25","1.3.6.1.4.1.57264.1.19":"a01e6f74b0aa83cdcc96e7137eac3f4f7b7aebec","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/tzeitim/rogtk/actions/runs/33548630278/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":4,"has_attestation":true,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-43868","aliases":["BIT-thrift-2026-43868","GHSA-2f9f-gq7v-9h6m","RUSTSEC-2026-0435"],"summary":"Unbounded memory allocation in `thrift` binary protocol `read_bytes`","severity":"high","score":7.5,"package":"thrift","version":"0.17.0","ecosystem":"crates.io","purl":"pkg:cargo/thrift@0.17.0","fixed":["0.23.0"],"url":"https://insights.sbomify.com/CVE-2026-43868/","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.22.6","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.22.6","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0379","aliases":["GHSA-x8jh-xj3x-gx3c"],"summary":"Multiple soundness issues","severity":"low","score":2.7,"package":"fast-float","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/fast-float@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0379","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"CVE-2026-111959","aliases":["GHSA-gqmm-qrjq-4c7h","RUSTSEC-2026-0442"],"summary":"Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads","severity":"unknown","score":null,"package":"arrow-data","version":"50.0.0","ecosystem":"crates.io","purl":"pkg:cargo/arrow-data@50.0.0","fixed":["57.3.2"],"url":"https://insights.sbomify.com/CVE-2026-111959/","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2021-0145","aliases":["GHSA-g98v-hv3f-hcfr"],"summary":"Potential unaligned read","severity":"unknown","score":null,"package":"atty","version":"0.2.14","ecosystem":"crates.io","purl":"pkg:cargo/atty@0.2.14","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2021-0145","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0375","aliases":[],"summary":"`atty` is unmaintained","severity":"unknown","score":null,"package":"atty","version":"0.2.14","ecosystem":"crates.io","purl":"pkg:cargo/atty@0.2.14","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0375","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0058","aliases":[],"summary":"custom_derive crate is unmaintained","severity":"unknown","score":null,"package":"custom_derive","version":"0.1.7","ecosystem":"crates.io","purl":"pkg:cargo/custom_derive@0.1.7","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0058","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0003","aliases":["GHSA-8655-xgh5-5vvq"],"summary":"Segmentation fault due to lack of bound check","severity":"unknown","score":null,"package":"fast-float","version":"0.2.0","ecosystem":"crates.io","purl":"pkg:cargo/fast-float@0.2.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0003","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2025-0057","aliases":[],"summary":"fxhash - no longer maintained","severity":"unknown","score":null,"package":"fxhash","version":"0.2.1","ecosystem":"crates.io","purl":"pkg:cargo/fxhash@0.2.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0057","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2023-0086","aliases":["GHSA-2326-pfpj-vx3h"],"summary":"Multiple soundness issues","severity":"unknown","score":null,"package":"lexical-core","version":"0.8.5","ecosystem":"crates.io","purl":"pkg:cargo/lexical-core@0.8.5","fixed":["1.0.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2023-0086","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0418","aliases":["GHSA-8p3x-q3q3-q3v5"],"summary":"libz-sys build script leaks environment variables in the build directory","severity":"unknown","score":null,"package":"libz-sys","version":"1.1.29","ecosystem":"crates.io","purl":"pkg:cargo/libz-sys@1.1.29","fixed":["1.1.31"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0418","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.7.1","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.7.1","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.53.1","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.53.1","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0391","aliases":[],"summary":"Data from an abandoned stream leaks into the next stream on a reused context","severity":"unknown","score":null,"package":"zstd","version":"0.13.3","ecosystem":"crates.io","purl":"pkg:cargo/zstd@0.13.3","fixed":["0.13.4"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0391","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0395","aliases":[],"summary":"Use-after-free with `CParameter::StableInBuffer`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0395","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0396","aliases":[],"summary":"`Seekable` reads a NULL or out-of-bounds seek table","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0396","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0397","aliases":[],"summary":"`OutBuffer::around_pos` exposes uninitialized memory","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0397","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0398","aliases":[],"summary":"`Seekable::decompress` sets a `Vec` length beyond its capacity for offsets past the end","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0398","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0399","aliases":[],"summary":"Use-after-free through `init_using_cdict` and `init_using_ddict`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0399","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0400","aliases":[],"summary":"Use-after-free of a dictionary after a one-shot call on a context with an open stream","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0400","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0401","aliases":[],"summary":"Out-of-bounds read in `train_from_buffer` when sample sizes overflow","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0401","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0402","aliases":[],"summary":"Heap buffer overflow in `CCtx::try_clone` on a multithreaded context","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0402","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0403","aliases":[],"summary":"Uninitialized memory exposed when streaming decompression of a legacy frame fails","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0403","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0404","aliases":[],"summary":"Double free in `DCtx::try_clone`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0404","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0405","aliases":[],"summary":"Out-of-bounds read with an out-of-range `InBuffer::pos`","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0405","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0406","aliases":[],"summary":"Use-after-free when changing a multithreaded context with an unfinished frame","severity":"unknown","score":null,"package":"zstd-safe","version":"7.2.4","ecosystem":"crates.io","purl":"pkg:cargo/zstd-safe@7.2.4","fixed":["7.4.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0406","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]},{"id":"RUSTSEC-2026-0410","aliases":[],"summary":"WebAssembly allocator shim corrupts memory on allocation failure","severity":"unknown","score":null,"package":"zstd-sys","version":"2.0.16+zstd.1.5.7","ecosystem":"crates.io","purl":"pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7","fixed":["2.1.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0410","wheels":["rogtk-0.1.25-cp38-abi3-macosx_10_12_x86_64.whl","rogtk-0.1.25-cp38-abi3-macosx_11_0_arm64.whl","rogtk-0.1.25-cp38-abi3-manylinux_2_28_x86_64.whl","rogtk-0.1.25-cp38-abi3-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":4,"total_sboms":4,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":1,"low":2,"unknown":25}}}