{"url":"https://pypi.sbomify.com/package/scopeql/0.6.0","markdown_url":"https://pypi.sbomify.com/package/scopeql/0.6.0.md","name":"scopeql","version":"0.6.0","purl":"pkg:pypi/scopeql@0.6.0","summary":"A command-line interface for ScopeDB","author":null,"project_urls":{"Changelog":"https://github.com/scopedb/scopeql/blob/main/CHANGELOG.md","Homepage":"https://github.com/scopedb/scopeql","Repository":"https://github.com/scopedb/scopeql"},"requires_python":null,"license":null,"classifiers":["Environment :: Console","Operating System :: MacOS","Operating System :: Microsoft :: Windows","Operating System :: POSIX :: Linux","Programming Language :: Rust"],"wheels":[{"filename":"scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/f6/0d/3c46c86ba1f587b3eaa37e0a625f7725dd45f343a4a5c14137081dedd0d0/scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"c00e2c51-783a-52cd-968e-5733ab16ad65","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c00e2c51-783a-52cd-968e-5733ab16ad65/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/ee/52/0695b76654e877e17be19905f219edf04dcc2a52814235476e9c888a2276/scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"0fbc01bf-dc6b-5048-ad59-0dbf8a2d2c41","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/0fbc01bf-dc6b-5048-ad59-0dbf8a2d2c41/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","url":"https://files.pythonhosted.org/packages/82/6c/2625e6247520d604f86a8bc6e26c294a1520816cc09b6f5a44aa9318c7ef/scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","sboms":[{"artifact_uuid":"a815307f-6948-5c62-939f-348172e540ae","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a815307f-6948-5c62-939f-348172e540ae/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","url":"https://files.pythonhosted.org/packages/1e/52/db4ee81725a29daee9346110945f34abc17ed6f4aa135285f45b2e6d49b0/scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","sboms":[{"artifact_uuid":"af64846d-13f5-5923-9a13-5b6ffa10bba6","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/af64846d-13f5-5923-9a13-5b6ffa10bba6/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","url":"https://files.pythonhosted.org/packages/83/14/7cbfc12a3818bdeb1d425245fa53fd721ad644fa45c81d2668909dd244d9/scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","sboms":[{"artifact_uuid":"717ebd69-1863-5627-8418-3345e6dd9922","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/717ebd69-1863-5627-8418-3345e6dd9922/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","url":"https://files.pythonhosted.org/packages/65/70/0e8df0545dc726dd978c0e56b1329b125eb63c6bffa4f9cff3c34f6dce89/scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","sboms":[{"artifact_uuid":"5a9eaabc-6907-5ee3-9f57-1e025817479c","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5a9eaabc-6907-5ee3-9f57-1e025817479c/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}},{"filename":"scopeql-0.6.0-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7f/01/a1acc38143727838842b5015714c2121e7907f982b26dcf1bb76b3b195df/scopeql-0.6.0-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"bb485de4-131d-59f8-8eb1-dbbf319cdfa5","path":"scopeql-0.6.0.dist-info/sboms/scopeql.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/bb485de4-131d-59f8-8eb1-dbbf319cdfa5/download","vulnerability_count":19,"scan_error":null}],"attestation":{"status":"verified","publisher_kind":"GitHub","repository":"scopedb/scopeql","workflow":"release-pypi.yml","environment":"release","predicate_type":"https://docs.pypi.org/attestations/publish/v1","certificate_claims":{"1.3.6.1.4.1.57264.1.8":"https://token.actions.githubusercontent.com","1.3.6.1.4.1.57264.1.9":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.10":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.11":"github-hosted","1.3.6.1.4.1.57264.1.12":"https://github.com/scopedb/scopeql","1.3.6.1.4.1.57264.1.13":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.14":"refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.15":"1121736892","1.3.6.1.4.1.57264.1.16":"https://github.com/scopedb","1.3.6.1.4.1.57264.1.17":"136724776","1.3.6.1.4.1.57264.1.18":"https://github.com/scopedb/scopeql/.github/workflows/release-pypi.yml@refs/tags/v0.6.0","1.3.6.1.4.1.57264.1.19":"e8d5950b1f04a2f848e6ff8996e6185b54c333a3","1.3.6.1.4.1.57264.1.20":"push","1.3.6.1.4.1.57264.1.21":"https://github.com/scopedb/scopeql/actions/runs/26871713289/attempts/1","1.3.6.1.4.1.57264.1.22":"public"}}}],"formats":["CycloneDX"],"sbom_count":7,"has_attestation":true,"vulnerabilities":[{"id":"CVE-2026-25800","aliases":["GHSA-4w2j-m93h-cj5j","RUSTSEC-2026-0185"],"summary":" Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.15"],"url":"https://insights.sbomify.com/CVE-2026-25800/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0340","aliases":["GHSA-3g6h-r5qx-f6hq"],"summary":"Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled","severity":"high","score":7.5,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0340","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-82250","aliases":["GHSA-2vh6-hw4j-32ww"],"summary":"gix-packetline: reachable panic on empty side-band packet (pre-auth network DoS)","severity":"medium","score":6.5,"package":"gix-packetline","version":"0.21.4","ecosystem":"crates.io","purl":"pkg:cargo/gix-packetline@0.21.4","fixed":["0.21.5"],"url":"https://insights.sbomify.com/CVE-2026-82250/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123613","aliases":["GHSA-2mjx-qc3c-rqvc","RUSTSEC-2026-0285"],"summary":"TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries","severity":"medium","score":5.3,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.45"],"url":"https://insights.sbomify.com/CVE-2026-123613/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.40","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.40","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0306","aliases":[],"summary":"`hex_decode_unchecked` AVX2 path reads past `src`","severity":"unknown","score":null,"package":"faster-hex","version":"0.10.0","ecosystem":"crates.io","purl":"pkg:cargo/faster-hex@0.10.0","fixed":["0.10.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0306","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0258","aliases":["GHSA-q83h-524g-xf6h"],"summary":"h2 unbounded empty DATA frames","severity":"unknown","score":null,"package":"h2","version":"0.4.14","ecosystem":"crates.io","purl":"pkg:cargo/h2@0.4.14","fixed":["0.4.16"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0258","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.10","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0173","aliases":[],"summary":"proc-macro-error2 is unmaintained","severity":"unknown","score":null,"package":"proc-macro-error2","version":"2.0.1","ecosystem":"crates.io","purl":"pkg:cargo/proc-macro-error2@2.0.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0173","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0338","aliases":["GHSA-465w-v9q3-7j98"],"summary":"Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.18"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0338","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0339","aliases":["GHSA-hmxj-32vh-65vr"],"summary":"Unbounded growth of pending connection ID retirements in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0339","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0342","aliases":["GHSA-2hv7-gw8g-gpq5"],"summary":"Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto","severity":"unknown","score":null,"package":"quinn-proto","version":"0.11.14","ecosystem":"crates.io","purl":"pkg:cargo/quinn-proto@0.11.14","fixed":["0.11.17"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0342","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0274","aliases":[],"summary":"Double free / use-after-free in `ReadChunk::commit` when an element's `Drop` panics","severity":"unknown","score":null,"package":"rtrb","version":"0.3.4","ecosystem":"crates.io","purl":"pkg:cargo/rtrb@0.3.4","fixed":["0.3.5"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0274","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.13","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.13","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.52.3","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.52.3","fixed":["1.53.3"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["scopeql-0.6.0-py3-none-macosx_10_12_x86_64.whl","scopeql-0.6.0-py3-none-macosx_11_0_arm64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl","scopeql-0.6.0-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl","scopeql-0.6.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl","scopeql-0.6.0-py3-none-manylinux_2_5_x86_64.manylinux1_x86_64.whl","scopeql-0.6.0-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-root-certs","version":"1.0.7","ecosystem":"crates.io","purl":"pkg:cargo/webpki-root-certs@1.0.7","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["scopeql-0.6.0-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":7,"total_sboms":7,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":3,"low":2,"unknown":12}}}