{"url":"https://pypi.sbomify.com/package/shelly-cli/0.2.5","markdown_url":"https://pypi.sbomify.com/package/shelly-cli/0.2.5.md","name":"shelly-cli","version":"0.2.5","purl":"pkg:pypi/shelly-cli@0.2.5","summary":"CLI for managing and controlling Shelly devices","author":null,"project_urls":{"Homepage":"https://github.com/rvben/shelly-cli","Repository":"https://github.com/rvben/shelly-cli.git"},"requires_python":">=3.7","license":"MIT","classifiers":["Development Status :: 4 - Beta","Environment :: Console","Intended Audience :: Developers","License :: OSI Approved :: MIT License","Operating System :: OS Independent","Programming Language :: Python :: 3","Programming Language :: Rust","Topic :: Home Automation"],"wheels":[{"filename":"shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","url":"https://files.pythonhosted.org/packages/c9/a4/a737af966ad5e80c6f7d29f58d112fca894336d804862651f47df5c32c6c/shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","sboms":[{"artifact_uuid":"dd8dc831-52e9-58ac-a4dc-c089cb17e3f5","path":"shelly_cli-0.2.5.dist-info/sboms/shelly-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/dd8dc831-52e9-58ac-a4dc-c089cb17e3f5/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","url":"https://files.pythonhosted.org/packages/e0/41/0ab262132a9f757510d776bff29ba6bfb1c988da50defd05bd2a83c5fc6b/shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","sboms":[{"artifact_uuid":"32aff670-f510-5cce-8982-997555c807b9","path":"shelly_cli-0.2.5.dist-info/sboms/shelly-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/32aff670-f510-5cce-8982-997555c807b9/download","vulnerability_count":11,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","url":"https://files.pythonhosted.org/packages/78/03/f26aaba1f084bdb136afda2a00042b23396575694746e86c9114243745ff/shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","sboms":[{"artifact_uuid":"be19f099-a36c-5d50-ac35-772f7baa7a85","path":"shelly_cli-0.2.5.dist-info/sboms/shelly-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/be19f099-a36c-5d50-ac35-772f7baa7a85/download","vulnerability_count":10,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","url":"https://files.pythonhosted.org/packages/9c/2e/96e4e20038fd94b9a5acf135a5ae21c1f25941da8d1ec4eed69d78f41e01/shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","sboms":[{"artifact_uuid":"23b5b292-a820-5422-8f53-8ac18cd847c4","path":"shelly_cli-0.2.5.dist-info/sboms/shelly-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/23b5b292-a820-5422-8f53-8ac18cd847c4/download","vulnerability_count":10,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"shelly_cli-0.2.5-py3-none-win_amd64.whl","url":"https://files.pythonhosted.org/packages/7a/86/c8d6d0a9c2afa5602c48c53e85e1883857fe3b8704e42115bb5724e5cf7a/shelly_cli-0.2.5-py3-none-win_amd64.whl","sboms":[{"artifact_uuid":"1656b4d4-665d-5a7d-8f37-01433f167ea5","path":"shelly_cli-0.2.5.dist-info/sboms/shelly-cli.cyclonedx.json","format":"CycloneDX/1.5","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/1656b4d4-665d-5a7d-8f37-01433f167ea5/download","vulnerability_count":9,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":5,"has_attestation":false,"vulnerabilities":[{"id":"RUSTSEC-2026-0194","aliases":[],"summary":"Quadratic run time when checking a start tag for duplicate attribute names","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0194","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl"]},{"id":"RUSTSEC-2026-0195","aliases":[],"summary":"Unbounded namespace-declaration allocation in `NsReader` enables memory-exhaustion denial of service","severity":"high","score":7.5,"package":"quick-xml","version":"0.38.4","ecosystem":"crates.io","purl":"pkg:cargo/quick-xml@0.38.4","fixed":["0.41.0"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0195","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl"]},{"id":"CVE-2026-123609","aliases":["GHSA-c8m5-c952-6cm4","RUSTSEC-2026-0346"],"summary":"`Debug` impls for client session values expose TLS secrets","severity":"medium","score":4.0,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123609/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123610","aliases":["GHSA-h2v8-394m-p7vv","RUSTSEC-2026-0348"],"summary":"Brotli certificate decompression can allocate up to 1 GiB before authentication","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123610/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123611","aliases":["GHSA-w44r-93j7-qv28","RUSTSEC-2026-0349"],"summary":"Unauthenticated ServerHello can downgrade later connections to classical key exchange","severity":"low","score":3.7,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123611/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"CVE-2026-123612","aliases":["GHSA-vp88-798v-h67f","RUSTSEC-2026-0347"],"summary":"Buffered application data sent to outer server after ECH rejection","severity":"low","score":2.3,"package":"rustls","version":"0.23.45","ecosystem":"crates.io","purl":"pkg:cargo/rustls@0.23.45","fixed":["0.23.46"],"url":"https://insights.sbomify.com/CVE-2026-123612/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0190","aliases":[],"summary":"Unsoundness in `Error::downcast_mut()`","severity":"unknown","score":null,"package":"anyhow","version":"1.0.102","ecosystem":"crates.io","purl":"pkg:cargo/anyhow@1.0.102","fixed":["1.0.103"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0190","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2024-0436","aliases":[],"summary":"paste - no longer maintained","severity":"unknown","score":null,"package":"paste","version":"1.0.15","ecosystem":"crates.io","purl":"pkg:cargo/paste@1.0.15","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2024-0436","wheels":["shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl"]},{"id":"RUSTSEC-2026-0441","aliases":[],"summary":"`pin-utils` is unmaintained","severity":"unknown","score":null,"package":"pin-utils","version":"0.1.0","ecosystem":"crates.io","purl":"pkg:cargo/pin-utils@0.1.0","fixed":[],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0441","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Certificate verification may accept distrusted intermediates","severity":"unknown","score":null,"package":"rustls-webpki","version":"0.103.15","ecosystem":"crates.io","purl":"pkg:cargo/rustls-webpki@0.103.15","fixed":["0.103.16"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"RUSTSEC-2026-0386","aliases":[],"summary":"`AsyncFd::new` and related constructors violate I/O safety","severity":"unknown","score":null,"package":"tokio","version":"1.50.0","ecosystem":"crates.io","purl":"pkg:cargo/tokio@1.50.0","fixed":["1.51.6"],"url":"https://osv.dev/vulnerability/RUSTSEC-2026-0386","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]},{"id":"CVE-2026-111943","aliases":["BIT-golang-2026-111943","GO-2026-6809","RUSTSEC-2026-0381","RUSTSEC-2026-0382","RUSTSEC-2026-0383"],"summary":"Bundled root certificates allow trust in distrusted emSign intermediates","severity":"unknown","score":null,"package":"webpki-roots","version":"1.0.6","ecosystem":"crates.io","purl":"pkg:cargo/webpki-roots@1.0.6","fixed":["1.0.10"],"url":"https://insights.sbomify.com/CVE-2026-111943/","wheels":["shelly_cli-0.2.5-py3-none-macosx_10_12_x86_64.whl","shelly_cli-0.2.5-py3-none-macosx_11_0_arm64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_aarch64.whl","shelly_cli-0.2.5-py3-none-manylinux_2_28_x86_64.whl","shelly_cli-0.2.5-py3-none-win_amd64.whl"]}],"vulnerability_scan":{"scanned_sboms":5,"total_sboms":5,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":2,"medium":1,"low":3,"unknown":6}}}