{"url":"https://pypi.sbomify.com/package/scrawl-engine/2.1.2","markdown_url":"https://pypi.sbomify.com/package/scrawl-engine/2.1.2.md","name":"scrawl-engine","version":"2.1.2","purl":"pkg:pypi/scrawl-engine@2.1.2","summary":"A simple yet powerful 2D game engine built on Bevy","author":"Streetartist","project_urls":{},"requires_python":">=3.8","license":"MIT","classifiers":[],"wheels":[{"filename":"scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/50/f8/a6c73b5373c3e812c8cc8cf2a8a7386c878ba694883897fb22abe679c0b0/scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"83b01e43-10c7-5fd1-9d33-bb80caf063ff","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/83b01e43-10c7-5fd1-9d33-bb80caf063ff/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","url":"https://files.pythonhosted.org/packages/17/6d/c2f83492698ea4c6a726168da3fc4f0f888602e520ec2d83ce1c9b562d9a/scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","sboms":[{"artifact_uuid":"944d29b7-9727-5a75-9c42-cc33760b3d0f","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/944d29b7-9727-5a75-9c42-cc33760b3d0f/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/59/14/1ce54931c1ea371944665908c3f62a276fbbd32d66695cd3991ade52f7a5/scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"5619e813-7bbc-58c2-b911-e76551255c51","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5619e813-7bbc-58c2-b911-e76551255c51/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","url":"https://files.pythonhosted.org/packages/f7/44/7d8bd49327cc47568d32cceaca51cd28e5b7016ca3f181d5205d061c875f/scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","sboms":[{"artifact_uuid":"21f4b3d9-3361-50d6-a304-bb2854cd7fa9","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/21f4b3d9-3361-50d6-a304-bb2854cd7fa9/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/44/5d/4b5be089f3f3d359e8123bd96024cfd30d6a45dca8405cf6b0b0f1ceb9ac/scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"117427ac-5931-501c-b432-130d71ebb406","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/117427ac-5931-501c-b432-130d71ebb406/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","url":"https://files.pythonhosted.org/packages/9d/9a/fd09e3a8cc4cecdd74c35b716e4b479cc13a6848e14d0dac1ef2ac53683d/scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","sboms":[{"artifact_uuid":"4abe30c4-937a-5b37-bb42-acf42ef6607e","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/4abe30c4-937a-5b37-bb42-acf42ef6607e/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/a9/dd/9ab02a0a97589fe0ef42d27b2847ddbd72c8dba0e524174e0dfbb3defd6d/scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"526fcf02-bb16-563d-81a1-c3156939993c","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/526fcf02-bb16-563d-81a1-c3156939993c/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","url":"https://files.pythonhosted.org/packages/0e/54/d639fbf62a45b9ddb79a6d68c67a51262c000b59141ff8414f0e6b3ec264/scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","sboms":[{"artifact_uuid":"50460308-d386-541f-8b7d-0315f4cb1cd6","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/50460308-d386-541f-8b7d-0315f4cb1cd6/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/69/ab/839ac165ba8335423ec4cdae050105daf9aeedec16178f773c8c41db4cca/scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"9738c9fa-e8e6-5442-a01f-ce9768da8fcb","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9738c9fa-e8e6-5442-a01f-ce9768da8fcb/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","url":"https://files.pythonhosted.org/packages/ca/62/616fe39376790c20a8f785debe98bfb1938cd83fdb50c84ad9081ac52ff2/scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","sboms":[{"artifact_uuid":"132dffbd-5d2a-5058-bb65-b292d5abccdb","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/132dffbd-5d2a-5058-bb65-b292d5abccdb/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/99/eb/429454ccd11169424d29367ee3cad3546522a4cc2cfe3bf2b813908b1b91/scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"6e1f80ad-cc4d-5770-8272-d0c23cac96a7","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6e1f80ad-cc4d-5770-8272-d0c23cac96a7/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl","url":"https://files.pythonhosted.org/packages/26/fc/a8982a8106fd22d040cfae9dea7dfe597e03de1638db056cfed2cc91c57b/scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl","sboms":[{"artifact_uuid":"742cf18e-2922-5d82-a4d4-e0ee838a39fd","path":"scrawl_engine-2.1.2.dist-info/sboms/scrawl-bridge.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/742cf18e-2922-5d82-a4d4-e0ee838a39fd/download","vulnerability_count":18,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":12,"has_attestation":false,"vulnerabilities":[{"id":"GHSA-36hh-v3qg-5jq4","aliases":["RUSTSEC-2026-0176"],"summary":"PyO3 has an Out-of-bounds Read in `nth` / `nth_back` for `PyList` and `PyTuple` iterators","severity":"high","score":8.7,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/GHSA-36hh-v3qg-5jq4","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.2","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.2","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.39.2","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.39.2","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0177","aliases":["GHSA-chgr-c6px-7xpp"],"summary":"Missing `Sync` bound on `PyCFunction::new_closure` closures","severity":"medium","score":6.3,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.29.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0177","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2025-0020","aliases":["GHSA-pph8-gcv7-4qj5"],"summary":"Risk of buffer overflow in `PyString::from_object`","severity":"low","score":2.9,"package":"pyo3","version":"0.23.5","ecosystem":"crates.io","purl":"pkg:cargo/pyo3@0.23.5","fixed":["0.24.1"],"url":"https://osv.dev/vulnerability/RUSTSEC-2025-0020","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0204","aliases":[],"summary":"Invalid pointer dereference in `fmt::Pointer` impl for `Atomic` and `Shared` when the underlying pointer is invalid","severity":"unknown","score":null,"package":"crossbeam-epoch","version":"0.9.18","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam-epoch@0.9.18","fixed":["0.9.20"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0204","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0221","aliases":[],"summary":"`event-listener` allows `!Send` tags to cross thread boundaries via `StackSlot`","severity":"unknown","score":null,"package":"event-listener","version":"5.4.1","ecosystem":"crates.io","purl":"pkg:cargo/event-listener@5.4.1","fixed":["5.4.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0221","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2024-0384","aliases":[],"summary":"`instant` is unmaintained","severity":"unknown","score":null,"package":"instant","version":"0.1.13","ecosystem":"crates.io","purl":"pkg:cargo/instant@0.1.13","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0384","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0186","aliases":[],"summary":"Unchecked pointer offset in crate `memmap2`","severity":"unknown","score":null,"package":"memmap2","version":"0.9.10","ecosystem":"crates.io","purl":"pkg:cargo/memmap2@0.9.10","fixed":["0.9.11"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0186","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0293","aliases":[],"summary":"Double free / use-after-free in `Consumer::skip` and `Consumer::clear` when an element's `Drop` panics","severity":"unknown","score":null,"package":"ringbuf","version":"0.3.3","ecosystem":"crates.io","purl":"pkg:cargo/ringbuf@0.3.3","fixed":["0.5.2"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0293","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0206","aliases":[],"summary":"`rustybuzz` is unmaintained","severity":"unknown","score":null,"package":"rustybuzz","version":"0.14.1","ecosystem":"crates.io","purl":"pkg:cargo/rustybuzz@0.14.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0206","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0206","aliases":[],"summary":"`rustybuzz` is unmaintained","severity":"unknown","score":null,"package":"rustybuzz","version":"0.18.0","ecosystem":"crates.io","purl":"pkg:cargo/rustybuzz@0.18.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0206","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.20.0","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.20.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.21.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.21.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.24.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.24.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]},{"id":"RUSTSEC-2026-0192","aliases":[],"summary":"`ttf-parser` is unmaintained","severity":"unknown","score":null,"package":"ttf-parser","version":"0.25.1","ecosystem":"crates.io","purl":"pkg:cargo/ttf-parser@0.25.1","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0192","wheels":["scrawl_engine-2.1.2-cp310-cp310-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp310-cp310-win_amd64.whl","scrawl_engine-2.1.2-cp311-cp311-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp311-cp311-win_amd64.whl","scrawl_engine-2.1.2-cp312-cp312-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp312-cp312-win_amd64.whl","scrawl_engine-2.1.2-cp313-cp313-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp313-cp313-win_amd64.whl","scrawl_engine-2.1.2-cp38-cp38-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp38-cp38-win_amd64.whl","scrawl_engine-2.1.2-cp39-cp39-macosx_11_0_arm64.whl","scrawl_engine-2.1.2-cp39-cp39-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":12,"total_sboms":12,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":3,"medium":1,"low":1,"unknown":13}}}